If that VM is isolated, you're fairly safe. Most people in practice run VMs on a Mac with various Sharing options enabled where files can be dropped to/from you

If that VM is isolated, you're fairly safe. Most people in practice run VMs on a Mac with various Sharing options enabled where files can be dropped to/from your Mac filesystem if the VM is breached. Given that a lot of people don't run AV or Firewalls on their VMs they're a very easy target.