>>547789
Imo it's not worth the hassle if you're not a company which has at least 2 experts who maintain this shit 24/7. Secondly, it's not as secure as everyone thinks. SEL was found compromised recently due to a bug which present in the code since several YEARS, making every SEL implementation basically worthless up to that date, no matter how well configured.
If you're into security go with compartmentalization. qubes, whonix. In IT security it's always better to assume that nothing is secure and build your system with mitigation in mind than trying to build a stronghold which contains several unknowns.
Security by isolation is the best approach you can have to achieve mitigation and security at the same time. Otherwise it's a waste of time and money.
Same goes for browsers. Why spent 100 hours trying to harden an already compromised browser if you could just use fucking Internet Explorer in a throwaway-sandbox.
If you can't afford a machine to run a qubes/whonix setup, you can just buy a cheap piece of hardware (old notebook / pc) and treat it as your sandbox and isolate it to your work/privacy related machine.