Comment by rbanffy

There are many ways a hostile program inside a VM can escape it and run code on the host or, at least, negatively affect it.