Virtual machines are that - tiny surfaces to access the host system (block disk device, ...). Which is why virtual machine escape vulnerabilities are quite rare.
replyI feel like in some cases we should be using virtual machines. Especially in domains where risk is non-trivial.
replyHow do you change developer and user habits though? It's not as easy as people think.