That whole song and dance about protection from an untrusted cloud operator sounds like a red herring to me. CSPs are the ones to deploy the technology. I suspe

That whole song and dance about protection from an untrusted cloud operator sounds like a red herring to me. CSPs are the ones to deploy the technology. I suspect their main desire is to (a) avoid the hassle of law enforcement requests, as one cannot grant access to keys one does not have and (b) allay would-be customer concerns around cloud hosting versus on-prem deployments. Maybe (c) is to support compliance and regulatory checkboxes. TEEs are not about security, rather about security liability. Academic attacks are indeed just that, and not necessarily expected to be seen in the wild or affect security posture.