> You'd let the pro blackhat loose in your VM on your own system?

AWS/GCP/Azure allow that all day every day.

Until you are (or if the agent runs) one privilege escalation away from the whole system being taken over.

So useradd isn't enough.