The fact that all SGX instructions are implemented with microcode makes it insecure since microcode can be overwritten and the process using the enclave will never know it.