@alois I actually use one VM for browsing knowns and trusted websites. If I had to use weird websites I never used, I could spin a new disposable VM for the task
there is a split-browser setup that allows using a web browser without exposing it to the network, but I did not try it yet.