Qubes OS actually aims at this, if you're serious about security. Of course, there is absolutely no way to completely suppress any attack surface, but compartmentalization can help.