You can since the enclave attests to what is running! This is also coupled with the crypto and NAT occuring in-enclave with various timing/obfuscations. It's

You can since the enclave attests to what is running! This is also coupled with the crypto and NAT occuring in-enclave with various timing/obfuscations. It's verifiably private.