It is technically possible to encrypt VM in a way that even host can't decrypt it. AMD Epyc CPUs supports encrypted memory.
That being said, this level of deep integration means that the moment you boot the cloud PC, all of the data are potentially very vulnerable on the software level.