The VM causes observability problems, which corporate platform stakeholders are sensitive to. They will eventually figure out a way to provide an ESR/logging interface to the sandboxed code that is distinct from the user level telemetry, then Defender/Crowdstrike etc will just support that.