While running Windows, as long as it isn't some modified version of it, there's always a risk that Microsoft could be collecting information about you. A VM is supposed to simulate a computer as accurately as possible, and shouldn't have any impact on the information Microsoft can collect about you.

I wouldn't say it's insecure though, it's mostly a matter of privacy.