No, the host isn't read-only, so if you have malware (which can see the VM and what its doing) you're fucked.

If you boot into tails, it's read-only.