Presumably in the case of a public terminal, you would have to trust that your keyboard inputs and screen outputs weren't being recorded. But then you also have

Presumably in the case of a public terminal, you would have to trust that your keyboard inputs and screen outputs weren't being recorded. But then you also have to trust that the VM container wasn't being malicious too, which the VM itself wouldn't be able to protect against...