If the software doesn’t report that it suspects it’s in a vm at test taking time, but instead records data for later analysis the test taker is leaving themselves open for a lot of problems months down the road.
Who is going to pay someone to look for problems months down the road?
Ultimately if malware doesn't think it's a VM, then test taking software isn't going to either. Malware is trying to resist analysis by trained professionals. Test taking software is just trying to sell to the next test; the sale is made by the company that takes the testing committee to the best sportsball game, not by how well they detect being in a VM.
(Interesting corollary; you should probably ALWAYS run inside a VM. There is so much malware that tries to detect it that it actually helps you; the malware will just shut itself off out of fear of being analyzed by a security researcher.)