> You'd let the pro blackhat loose in your VM on your own system?

AWS/GCP/Azure allow that all day every day.