A problem I see a lot in this community when it comes to security is letting perfect be the enemy of good. Yes, this is vulnerable to an effort by Intel, but t

A problem I see a lot in this community when it comes to security is letting perfect be the enemy of good. Yes, this is vulnerable to an effort by Intel, but that's still a significant increase in complexity and capital required to pull of an attack. Really, "still vulnerable to malicious insertion by the hardware vendor" is probably one of the most positive things you can say about a security system, as generally, especially when it comes to privacy, there are many attack vectors that are _so much easier_. For instance, OWS itself. The improvement here is reducing the attack surface. Yes, that doesn't look like an improvement if you choose to look only at the particular part of the attack surface that this change doesn't address. But in real terms it is a substantial improvement.