Anyone still on XP ought to move to linux if possible, it's equally lightweight on your computer, supports equally old hardware, and has far better security.
How is it illegal to use XP in a VM? That doesn't make sense, especially if they obtained the product key legally. I'm sure there's still a way to do that, through authorized resellers or some other legal manner.
If you need to run XP, XP point of sale edition was updated up to a few months ago when it finally EOL'ed. Its by far the most up to date security wise of the XPs.
No. Running tpt on windows XP is deadly, banworthy, earth-destruction worthy, unacceptable, illegal and every hitman in the world will try to shoot you.
/s