That's hard to say, but both VirtualBox and VMware were hacked this year[1]. Definitely most secure would be both dedicated PC and running everything facing out

That's hard to say, but both VirtualBox and VMware were hacked this year[1]. Definitely most secure would be both dedicated PC and running everything facing outside from VM. (and using SELinux or AppArmor as well). [1]: https://securityaffairs.co/wordpress/82702/breaking-news/pwn2own-2019-competition-d1.html https://securityaffairs.co/wordpress/82702/breaking-news/pwn...