Quite a lot of ISPs have MAC address restrictions, in which case they wouldn't let the VM get an IP at all.

Anything other than NAT as the default would lead to VMs without Internet connectivity in a lot of situations. NAT really is the only safe default.