The point of isolating VMs is to isolate compromise. It makes no sense to have VMs that are easily identifiable and unencrypted. If a running machine is compromised FDE doesn't help. But isolated encrypted machines with correctly configured permissions do.
#[5]