You don't need to be a nation state to defeat this even if it's set up "properly", you can use low-cost interposer attacks like https://batteringram.eu/ to alias the guest's memory into another guest that you control.