But going all the way to the end of that tradeoff is so expensive. It seems like a Helm VM would be 90% as secure and also 90% cheaper.

But with Helm, we don't control the hardware, do we?