So the plan is to make a Windows 10 guest, give it lots of vCPUs and memory, perform GPU passthrough to achieve maximal performance, and then load my games onto this guest. The aim of this would be to stream the games over LAN to my PCs, thus providing easy access while also putting all games on a single box that has no personal files on it.
As games can include tracking or other invasive anti-cheat as well as vulnerabilities like any software, I feel that they should be placed on an unprivileged system. However, the most secure method of using a restricted VLAN that has dedicated clients for said gaming (with ACLs blocking any of those devices from talking to anything else in the building) would be rather annoying in terms of convenience and resources.
As such, my question boils down to if the plan proposed in paragraph 1 is sufficient or if streaming of a gaming server still opens the entire network to considerable risk (as there's always some risk).
The reason for the specificity of this question is that games are a unique threat model for me, as they are not critical by any means but at the same time do not clearly need to be as isolated as traditional DMZ devices (e.g. webservers).