Forget antivirus, you could use this to build ransomware that doesn't need C2 at all. The enclave itself can wait for confirmation of the bitcoin transfer and

Forget antivirus, you could use this to build ransomware that doesn't need C2 at all. The enclave itself can wait for confirmation of the bitcoin transfer and then release the decryption key. Sure you can stop it talking to the outside world, but you can't force it to give up the key.