The intended use case is for remote execution where the user (data owner) pays a service provider to run services on their hardware. It could still work if the

The intended use case is for remote execution where the user (data owner) pays a service provider to run services on their hardware. It could still work if the user somehow prepares the chip herself and ships it to the service provider to be used on their future data, but most users would not want to bother with that first step.