Yeah, to be clear I'm pretty excited about confidential computing and startups building on it, like Tinfoil, for some use cases. I just wanted to point out it's far from adequate for some important threat models (e.g., securing model weights for data centers located abroad, I think). (It's also not super widely adopted in AI yet, but that seems to be changing, at least for inference workloads.)