I sometimes use Chrome, just for the few times I want Flash. I've created a separate Standard user for this on my Mac. I don't really care if a Flash exploit t

I sometimes use Chrome, just for the few times I want Flash. I've created a separate Standard user for this on my Mac. I don't really care if a Flash exploit takes over this user. The exploit would then have to work a little bit harder to get its tentacles into the rest of OS X (although I'd bet there were OS X zero-day exploits in that Hacking Team dump). I suppose it's time to add a VM to the recipe. Then my protections would be: 1st Flash itself 2nd Chrome sandbox 3rd VMware 4th OS X Standard User What are the odds of any exploit being able to circumvent all of that? Probably high if I'm a strategic target, probably very low if I'm Joe Random User. Anything else I could do to protect myself, other than eschewing Flash altogether?