Overview of Intel SGX – Part 1, SGX Internals

The fact that all SGX instructions are implemented with microcode makes it insecure since microcode can be overwritten and the process using the enclave will never know it.