Sure, but if I'm really worried, egress filtering will catch it or the VM won't be allowed to connect out to any non-whitelisted hosts. Security is about defen

Sure, but if I'm really worried, egress filtering will catch it or the VM won't be allowed to connect out to any non-whitelisted hosts. Security is about defense in depth, not just "don't run anything you haven't read in detail" - have you read the code of the web browser you posted with?