Very small attack surface, I have been using qubes for years, never had to copy a file from dom0 to a vm.