My guess is that the performance loss from removing these features would make such CPUs less economical than strictly enforced separation between security domai

My guess is that the performance loss from removing these features would make such CPUs less economical than strictly enforced separation between security domains on a hardware assignment and scheduling level. That is, just forget about having the same server run stuff from different contexts at the same time.