I took this even further, and run the "impermanence" setup, where my whole system is cleaned on every reboot.