Mode 4 + mode 1

physical or virtual given that a dedicated device for each mode is not available

Is it possible to seperate mode 1 + mode 4 on qubes at different times

Kicksecure qubes vm only behind isp for banking real accounts login etc

Mode 1 only through whonix and tunnels at different times

Any risks