in the documentation page:- https://www.whonix.org/wiki/Qubes/Install
number 7 , it is really confusing for the new users + if someone mess up the GW-appvm it will be also a mess up on the templates update/upgrade and i think this is where we expect the insecurity of this idea/design.
i really want to put a new upgrading idea which i hope it can be implemented in whonix-qubes.
like for example:-
if whonix WS/GW going to be installed inside Qubes image by default , how about that we make the GW-appvm also installed by default (like fedora template and the its appvms from it like banking,personal …etc)?
because the real question is which one is better or isnt making an GW-appvm only for the sake of updating/upgrading the templates better than the documentary one?
@Patrick what do u think?