Yeah, sorry I meant more in the way that a user in a VM is a really different threat surface to a full root user.

For sure both should apply security patches, and avoid malware, I’m just wondering even within that model what the differences are.