Is it possible to configure access to disks only from the virtual system and prohibit from the main one?

Question

Information Security

Is it possible to make it so that access to hard drives is denied from the main system and only allowed from the virtual one? At the same time, so that, as needed, it would be possible to allow the main system access to the files of hard drives that are currently needed (read-only).
So that even the most advanced encryption trojan cannot damage the data.
The reverse option, when the main work is carried out in a virtual system, is not considered, since I use, for example, video editing programs that do not work well in a virtual machine.

Answer 1

For example, a USB-SATA adapter thrown into a virtual machine. After USB forwarding, the disk becomes inaccessible to the main system. As for read-only access, there are USB-SATA with a "Read Only" switch

Answer 2

I assume that we are talking about something like VirtualBox or VmWare Player.
But what if you do something similar with Shared Folders?
1. Create a separate VM user under which VMs will run
2. Create a separate folder and deny any access to it to all users, including system users, except for the VM user.
3. Add this folder as Shared Folder in VM settings.
4. Run the VM only as a VM user.
Isn't it?

Answer 3

Once a physical disk is completely taken over by a VM, can malware access that disk from the host OS?