the main reason to use a VM is so that you can test out software. If you put AV and that on there what is the reason? Yes it can get infected. Yes if it is bad enough it can infect the host system as well.
But the truth is do you really think you are going to be doing anything that will require it?