I agree with others, something that has been hacked before would never give me trust ever again, it would not be possible at all for me to trust it and use it.
Do you use a centralized exchange? They have all been hacked at some point.
This is why I believe that we should be focusing a lot more towards finding something that has never been hacked or never had any bugs etc etc before
This is an unobtainable standard. Every piece of software in existence has bugs in it. Bitcoin itself has had a number of critical bugs, probably the worst of which resulted in 92 billion bitcoin being created out of thin air.
For the online wallet, use another tails os to put your xpub. You will pass the psbts with qr codes or burned cds. not usbs.
What's the benefit of your online wallet being on another instance of Tails, as opposed to just your usual OS? Provided your computer is clean, free from malware, and your watch only wallet is connecting exclusively to your own node, I don't see what is to be gained by using Tails for this part? I suppose the benefit comes if you are not connecting to your own node at all and are just using third party Electrum servers?