The computing model enabled by SGX (and other mechanisms like it) require more careful specification of the entities involved and the trust relationships betwee

The computing model enabled by SGX (and other mechanisms like it) require more careful specification of the entities involved and the trust relationships between each other. In the cloud situation, the customer doesn't trust the cloud provider beyond just running his/her software (but inherently trusts him/herself). The cloud provider doesn't trust the customer to respect its isolation boundaries and must defend itself from SGX enclaves (and indeed all other client software) appropriately.