No, the host isn't read-only, so if you have malware (which can see the VM and what its doing) you're fucked.

If you boot into tails, it's read-only.

That's the use case of Whonix.

http://whonix.org

Only if you trust the host machine 100%. But you can never trust the host machine 100%.