This provides an additional layer of confidentiality against physical attacks, as well as attacks cross-VM or VM-to-hypervisor attacks.

This gets you close to the security of a physically dedicated server, without the expense of actually buying/leasing a full server.