A Guest OS (like Windows running inside a VM) expects to be in Ring 0. However, the Hypervisor must be in Ring 0 to control the host. If the Guest OS tries to execute a privileged instruction (like modifying memory page tables), the CPU would crash or throw an error because the Guest is actually running in Ring 3.