Hacker News Reader

Even with a VM you need to be somewhat careful as hypervisor breakouts are not unknown.

Absolutely.

That said, the Linux kernel is a helluva lot more attack surface than the relatively few hypercalls provided by most Type 1 hypervisors.