Is putting your reverse proxy in a VM not secure enough? What can break out of a sandboxed VMM?

I suppose there was a KVM exploit on twitter a while back...