It's still not a bad idea to reduce attack surface. A VM is much easier to harden than a kernel.