If the VM has: -Access to your private data -Exposure to untrusted content -The ability to externally communicate Then it's not "locked down" Depending on

If the VM has: -Access to your private data -Exposure to untrusted content -The ability to externally communicate Then it's not "locked down" Depending on your security requirements you should have only one or two of those capabilities per VM