Obviously, a first class local virtual machine is superior in most ways, but Apple in particular is way too stubborn about blocking this.
I think a secure VM would be a really cool choice for remote work. If it could be optionally locked down by the host operating system so you couldn't get at the disk, then BYOD would be a lot simpler.