That’s more secure than most setups, the VPN with killswitch will defeat any and all attacks you’re likely to encounter if you don’t open files on that same VM.

FDE is for physical attackers, it would have nothing to do with torrenting unless you’re really intending on pissing off every single criminal legal authority and not just worried about civil suits from copyright holders.

Luckily there’s one mainstream and about a half dozen non-mainstream mobile OSes besides Apple, and almost anyone looking for the best in anything would not have Apple hardware in the first place.