On this note I would check out the Universal Blue project[1] which uses a combination of technologies to implement an immutable OS desktop environment.

[1] https://universal-blue.org/