Looks cool I wonder how it would work in action.

But Qubes runs separate VM for diffrent functions to prevent compromised VM to do any harm for main system. For example halium kernel could have only access to camera so it won't spread harm?

Doesn't kernel require just tens of MB?

Even more they don't trust china...