Not sure exactly how to solve this but something should be done.
Was contemplating:
dmesg --console-off
Where/when to run that command? That command is per console or user or global?
The context which pointed that out: timesync Error: vgsvcTimeSyncWorker: VbglR3GetHostTime failed - #7 by Patrick_mobile
Also whonixcheck needs lockdown wrt log viewing. Allows users to see log on systemd warning/error/cycle messages. Running whonixcheck should require sudo but as much as possible should run unprivileged.