What difference does a virtual machine make? It doesn't make any.make sure to use a virtual machine with a dedicated proxy shadowban.
Assuming you are correct on the instagram API part (and if you mean the public API you are not) using a VM or proxy will have no bearing on this at all. Assuming what you say is correct (I disagree, but assuming), a VM and proxy will not do anything to protect your account from restrictions of ban at all.since most software you can find publicly available communicates through Instagram's API, which means they can see that you're using automated software and there's a risk your profile will receive restrictions or a shadowban.
Yes you can scrape through other words / tags someone with a soundcloud might use, then filter out those without a soundcloud, but how does this work better? When ever you start to filter out, you are making more requests to get the results you want due to ignoring results, this is where the problems come in, if you want 1000 results and you are ignoring 50% of results, you need to make 2000 results. Heavy filtering is how you lead to problems through too many requests. Sometimes there is no other way (locations for example) but in the OPs case they can do this - search for soundcloud links so that is the way togoPublic bots though don't work well but have an option to search for through keywords, you can do a quick research on what 'words' music artists are using frequently in their bio and run it accordingly. If not, then you can scrape them in bulk using hashtags and then sort them out accordingly from the final CSV file.
What difference does a virtual machine make? It doesn't make any.
Assuming you are correct on the instagram API part (and if you mean the public API you are not) using a VM or proxy will have no bearing on this at all. Assuming what you say is correct (I disagree, but assuming), a VM and proxy will not do anything to protect your account from restrictions of ban at all.
If you are referring to automating a browser, yes (and there is more you need to do that just use a VM and a proxy to hide the host machine if trying to automate 100s accountsUsing a virtual machine isn't the only way to do it, but it's an easier way to create unique browser fingerprints than dedicated software. If you think there's no need to separate cookies and browser fingerprints when logging into separate accounts I don't know what to tell you, but Instagram can definitely detect what you're doing if you manage your accounts by logging out and back in with the same browser/fingerprint.