[yuansong98]

we lock down the nodes themselves so that only the hypervisor has direct access. we take this pretty seriously.

[kevin_thibedeau]

State level actors will snoop the bus.

[Retr0id]

You don't need to be a nation state to defeat this even if it's set up "properly", you can use low-cost interposer attacks like https://batteringram.eu/ to alias the guest's memory into another guest that you control.