Is there any security concern to use same VM (self-host agney) for "production" stage and another stage at the same time

Question

I have multiple stages "Dev", "Test" and "Production" in my project. Currently, I have a VM with a self-host agent that pipeline runs deeply on "Dev" and "Test. Some developers have access to this VM (CI/CD VM)
Now, I am going to set up the "Production" stage and I want to know what is the best practice.
For the "Production" stage, I will set up a different VM specific to the "Production" stage and install a self-host agent with limited access.
Is it a good security solution to isolate the "Production" stage?
Is there any security concern I should know about?