VM can better isolate the network, such as a cracked system otherwise potentially being able to attack/hack your router
Not sure I follow, but WSL combines the full attack surface of a linux box
with the full attack surface of a windows box all in one, so I'd be pretty reluctant to open the firewall to WSL :)
--- Mystic BBS v1.12 A46 2020/08/06 (Linux/64)
* Origin: monterey bbs (21:1/168)