Problem is if host infected (keylogger, trojan, meterpreter, ...) recording keystrokes while offline and sending it back to attacker when going online. Also we don't know what zero days might exist in the vm software or operating system used.