> I always thought that it's easy to get into vm from host, but it way harder to get to host from vm That's right. > but the idea that it easy to get inside v

> I always thought that it's easy to get into vm from host, but it way harder to get to host from vm That's right. > but the idea that it easy to get inside vm keeps me from doing it No! Of course the host is the ultimate dictator. Just don't do untrusted operations in the host context. Have low-trust, low-connectivity, low resource level VM for untrusted work.