Viruses are targeting Linux now, a firewall (ufw, iptables), common sense, and not visiting weird webpage are your best arms gains common attacks, phishing seems to be the most used way to get in though, so just be alert.
A virtual machine is a good way to do sand-boxing (kind of overkill just to sand-boxing an app )
