I don't get it, shouldn't you use the VM for accessing everything except your bank?

If the host gets compromised from non-banking activity, it can just take over your VM.

Almost all of my activity on that machine is in one VM or another. I mostly only work on the host OS when I'm making a new VM.

My “solution” is that the VM is a different OS, amplifying the resources required to attack me beyond worth.