Because AWS does not sell the Nitro TEE hardware And so there is no case where you find a Nitro TEE online and the owner is not AWS And it is practically impo

Because AWS does not sell the Nitro TEE hardware And so there is no case where you find a Nitro TEE online and the owner is not AWS And it is practically impossible to break into AWS and perform this attack The trust model of TEE is always: you trust the manufacturer Intel and AMD broke this because now they say: you also trust where the TEE is installed AWS = you trust the manufacturer = full story