You can run the firewall as VM in any kind of virtualization. What they mean is, that when your Hypervisor fails, most of your network infrastructure will be unavailable. Essentials like DHCP, Router Advertisements, DNS etc... stop to work while you have to troubleshoot the Hypervisor itself.