The paper is interesting in that it shows the extent to which an untrusted enclave is capable of owning its host. This is not an attack within the adversary mod

The paper is interesting in that it shows the extent to which an untrusted enclave is capable of owning its host. This is not an attack within the adversary model of SGX, as the authors state, because an enclave can, by design, write to host memory. Typically, this would be enough for people to assume that arbitrary code execution would be possible, but, these researchers went through the exercise of actually implementing the attack. They highlight a useful property of TSX when invoked inside an enclave, allowing them to determine the accessibility of host memory addresses (termed caves), without incurring exceptions. What is interesting about the paper is the creation of a code reuse attack to robustly subvert control flow and create arbitrary execution in the host context.