as i asked above, wouldn't confining your browsing to the VM go a long way to protecting your wallet on the host?