The CPU requirements are because they wanted to enable virtualization based security by default and have it be performant.