You should write down reasons for why fitgirl should be excluded. Vibe bypassing security regime is not a good idea. And maintain a list of sources that get a pass so you can at least trace down where you fucked up.

In my opinion, if you are serious about security then you need two computers. One with qubes is for stuff you don’t want to be public, and one with windows with the assumption that eventually everything in it will be public.