It’s really not harder for the folks with this skill set, and plenty of these vulnerabilities have been found in VMware too over the years.
https://www.blackhat.com/presentations/bh-usa-09/KORTCHINSKY...
https://www.darkreading.com/vulnerabilities-threats/vmware-z...
https://cloud.google.com/blog/topics/threat-intelligence/vmw...