The data is transparently encrypted and decrypted specifically within the processor. The OS kernel on the host machine doesn't have access to the unencrypted contents of the guest VM's memory.

> I don't understand, and couldn't get any information from the article either.

See this wiki article for more info on this class of technology: https://en.wikipedia.org/wiki/Data_in_use