Is this a safe setup?

I’m doing this on my main machine.

My Host OS is runnings Xubuntu 18.04, and my VPN is PIA with its stock controller.

My Guest is Windows 10 unactivated, and it is running in Virtualbox. I haven't touched any of its settings beyond setup (created a new VDI, dynamically allocated). By default, Virtualbox VMs are configured to use NAT.

Will this prevent scammers from accessing my host machine and/or its files, and from accessing my network information? I don't want to be vulnerable in any way.