If you want to run Windows VMs with all the security features enabled, xcp-ng / xen is a non-starter as it's been completely broken for years with no fix in sig

If you want to run Windows VMs with all the security features enabled, xcp-ng / xen is a non-starter as it's been completely broken for years with no fix in sight: https://github.com/xcp-ng/xcp/issues/105 https://github.com/xcp-ng/xcp/issues/105 Proxmox / KVM is the only alternative to ESXi that can support all of Windows security mitigations such as Core Isolation, which requires nested virtualization.