You’re right about that. Depends on the malware, there are infection which could spread through the network. Still, normally there’s little need of AV in guest OS if you already have AV in your host (even if you set your guest to share file, connection, or printer with host).