Yes. And using a VPN in a dedicated VM isolates activity well from the host machine and ISP uplink. There's still the risk that VPN providers will share informa

Yes. And using a VPN in a dedicated VM isolates activity well from the host machine and ISP uplink. There's still the risk that VPN providers will share information with adversaries. And so it's better to use nested VPN chains, which distributes over multiple providers. The matter of virtual graphics drivers cuts both ways, however. Multiple VMs in a host that use the same virtual graphics driver have the same WebGL fingerprint. So if you want multiple fully compartmentalized VMs on a given host, they must use different virtual graphics drivers. That is, Windows vs macOS vs Debian family vs vs Red Hat family vs BSD family etc.