Wait, how would the VM not know where it's hosted? Not trying to call you out but even if the all traffic of the VM was routed through tor it could still figure out where it was. PM me if you want me to go in depth further.