It’s enough if you just need access in a VM or over a lan (depending on your threat model) but agreed.