That has no longer been the case for a while now and I could watch 720p in a reasonable sized window with no problems. SPICE is the default and handles 2D graphics all right. 3D graphics are safe to enable because the API was designed with security in mind. The necessary drivers have now been included as of Buster.