Very interesting! When running KVM on the Pi, does that use virtualisation extensions if the processor has them? (I don't know anything about ARM and virtualisation).
Other than that, the A72 handles VMEnters/VMExits by trapping in/out of EL0/EL1/EL2.