Hacker News Reader

Even if everything is done in a secure enclave you have to trust that it's actually secure.

The secure enclave cannot be more secure than the software running inside it.

As for the trust, we generally trust the CPU manufacturers, including their implementation of encryption like the AES instructions.