Comment by pas

If you pin VMs to different cores, never sharing hyperthreads, then the risk is contained per VM (or per core).