The issue is that virtual machines could be very easy targets if there weren't mitigations (It's much more complicated than that but that's the idea)