That seems like a pretty safe idea.
I bet that many people that should know better here have never updated their VM, except those who are warned by the auto updater that is.
Not to say that this is not actually a security threat, but I would say a VM is safe enough