I do something very similar; there are two main differences

* I make a copy of a special default profile instead of a fresh one - eliminating a bunch of annoying popups and preserving add-ons

* I set it as my default browsing experience ('web') so that anything that tries to launch a browser window also gets contained