[chews]

you compel the host under similar threat of non-existance to grant you view of the hypervisor. you're not running on bare metal with alternate TPM's that arent the Intel IMU (also backdoor'd) so you're just as pwnable.

now say you're doing this on a raspberry pi or other openhardware like a librum machine with a yubikey hsm on local wifi or physical ethernet... you may have a shot at the privacy you're looking for.