A few days ago, a post about Intel hardware accelerated homomorphic encryption might show a better way: if an OS is running but the server cannot know what’s running, then you no longer need to trust that hardware.

It’s trusted computing on untrusted hardware.

It’s similar to how you send encrypted TLD traffic over untrusted networks.