You are wrong, even on GCP. PD, persistent disk are all remote, but actual Local SSD are, local. There is still a bit of code that runs between the guest and the device. All of this is public information.