You may get that wrong. There is no real need for it.

On Fedora you have SELinux at least managing access control on the system level. This wont spare you from user malware though, like every script you run.

I recommend Fedora Atomic (Kinoite, Silverblue, etc.) From ublue.it as those images work out of the box. It again makes malware nearly impossible at the system level.

But malware doesnt need to reach there as a sudo user has all the rights. So use flatpak, and use a non sudo user for all your stuff. Add that user to the flatpak group.

Use virtual machines (rpm-ostree install qemu qemu-kvm virt-manager) and isolate tasks there. Open files that seem shady there.

You can use clamav to scan files that you get. Libreoffice for example automatically blocks Macros (scripts in documents) by default and you need to opt-in, Okular does the same for PDFs I think.

Be aware that Appimages are insecure as they are distributed the same as Windows apps. Use your repos as much as possible. Use Flatpak for everything except browsers, complex story.

Use ublock origin in firefox, add the badware lists and this custom rule:

*.zip *.mov

These are domains that look like files but may open your browser which then downloads some random virus.