I have reviewed the threat model carefully before. AMD never claims that their confidential compute offering is immune to attacks involving physical access. I a

I have reviewed the threat model carefully before. AMD never claims that their confidential compute offering is immune to attacks involving physical access. I assume what you mean by confidential compute is technology like AMD SEV SNP? Those are very different in that they allow you to run a trusted virtual machine on an untrusted hypervisor. This attack is completely different; it's akin to breaking Secure Boot on a PC.