Evergreen Theo quote: https://marc.info/?l=openbsd-misc&m=119318909016582
Take it with a grain of salt though as they ship their own VM now too :) https://www.openbsd.org/faq/faq16.html
Take it with a grain of salt though as they ship their own VM now too :) https://www.openbsd.org/faq/faq16.html
TLDR: P(non-root-vm-breakout-not-requiring-app-breakout) < P(app-breakout) and P(non-root-vm-breakout) < P(local-pe | system-service-exploit)