Thank you Ego.
Thank you for the link, so it seems Qubes is def the more secure way. nice to know. I am still unclear about the separation when using different VMs. I think I am answer my own question but would feel more comfortable if someone more knowledgable confirmed - or correctred - my assessment.
When I set up a dummy WhonixVMs the whonix check gave me significantly different socksport and transport test results for the 2 diff VMs, though I am not sure what those mean or if they matter. When I did the IP check from the opening browser page the IP addresses of the 2 diff VMs were different but barely, only the last digit was different - and it was only 1 dig, not 3 in both cases. I also tried checking the MAC addresses as I think whonix spoofs the mac addresses - right? I used ifconfig and the MAC-HWaddr addresses were also different but also just barely? Again the address was only different by the last digit?
So A. Are my assumptions right? B. Am I checking right C. Does the marginal difference in numbers/addresses matter?