Because any ol’ Surface ships as a secure core pc which utilizes virtualization for memory security etc:
https://learn.microsoft.com/en-us/windows-hardware/design/de...