Frankly, this whole exercise of "don't trust the cloud host" is pretty dumb. Flaws in chipset vendor products and new avenues of fuckery will continue to to be found.

Expecting that you can trust a computer you've never even seen, let alone one you *know* is a VM with a whole other untrusted OS under it, is a fool's errand.

If you need this level of trust, you should be on-prem. No excuses.