It doesn't allow you to assume that at all, precisely because of the potential for vulnerabilities. SGX is just yet another iteration of the 'trusted tamper-pr

It doesn't allow you to assume that at all, precisely because of the potential for vulnerabilities. SGX is just yet another iteration of the 'trusted tamper-proof hardware' concept (which, for reasons that are unclear to me, is apparently magically fine when Intel does it but impossible and bound to be broken when somebody else does it), and it suffers from the exact same issues as every 'trusted hardware' scheme before it.