If malware can use LLM's in attacks wouldn't it make sense for programs like Qemu or Virtual Box to give options to disable flags for VM's that make it incredibly easy to identify that a machine is a hypervisor or not?

As far as I've read into it it's not possible to spoof every single identifier on a vm. I'm not sure if it's because of laws o algo but if malware could use an LLM then it surely would be capable of looking up obscure unpatched VM escape attacks on reddit that hand written malware would have to be specifically designed to utilize otherwise.