I did a job interview in a VM once and my legitimate accounts on some platforms got banned for using them in a VM. So you can't even protect yourself.

> my legitimate accounts on some platforms got banned for using them in a VM

Which legitimate accounts get banned for use in a VM?

That seems like an incredibly important thing I should know as I use legitimate accounts in VMs.

Bullshit. How would a website even detect a VM?

They can ask your web browser what GPU you have.

If it says QEMU, the jig is up.

See here:

https://developer.mozilla.org/en-US/docs/Web/API/GPUAdapterI...

Live demo here:

https://www.checkadevice.com/tests/gpu/ (random web site that came up in a quick search)

You have to make sure your VM + GPU hide or falsify all identity information. They just have to find one API or signal that you missed that reveals it.

RCE then run an exploit to break out VM. If it's success, then you are on VM.

Absolutely. "To access our secure site, install this certificate as follows..."