Wouldn't the VM software itself using ASLR and running the VM in jails, such as firejail for Linux, reduce the risks?