If you are using a reasonable OS like Debian, which is fully encrypted with whatever defaults given on there and you encrypt your documents with a VeraCrypt container, when you open the document inside the VeraCrypt container, you will leak this file all over the system in form of various temporary files and so on. Is it possible to open it in a way that it never leaves the container? I mean you could open it in Tails by making a copy on the home folder or something, since it’’s all in RAM, and open it there, but this is too time consuming just to check some document. Within Debian, is there a way to sandbox the contents of the container or and then access them in a way that does not leak? I mean yes the full disk encryption is protecting an “who cares if it leaks”.