I usually run it in a partition I don't really use except for games, which is a stripped down Windows install and I make sure everything is logged out and closed completely.
But yes, a separate device would be another layer of safety. I *personally* don't find it necessary, but your use case may differ greatly from mine.
