I realize that many of us don't get to choose which updates we apply to our base OS and the VMs Parallels supports. But given a choice, why would patches designed to prevent the new chipset viruses now getting so much attention need to be applied to a VM? Wouldn't the patches applied to the base OS protect the whole system?