What is best anon-security setup?

First i want to decide which option will be best for privacy host os meanwhile i also have public os for games etc:

  1. Kicksecure as live mode on host OS - dualboot as second OS on second SSD
  2. Kicksecure on usb in live mode
  3. Kicksecure live mode on external SSD
    On top of that kvm and whonix vm’s