This is true of all forms of confidential compute.