If it runs inside the sandbox and the guest is compromised, can't the guest just lie?

Absolutely. That's why overlay is not the default.

That's... uh, an interesting approach to security.

	▲	kstenerud 4 hours ago \| parent [-]
		What is? Defaulting to the most secure method?