I had no idea this existed

I assume larger anti-malware companies can afford to test malware on bare metal. Does virtualization still give them benefits, like better visibility into how the malware functions?