Not sure if you already knew about this and are just joking, but the locked hypervisor approach is actually one that Citrix (mentioned in the article) is touting.. their XenClient stuff does that.