No, they do not need one. The article paints VM as a very broad definition, mostly revolving around permissions for accessing things or executing actions.