Exclaves run on the AP
And 2014-ish Bromium (now HP) uXen + AX, https://www.platformsecuritysummit.com/2018/speaker/pratt/
If the "Secure Exclave" is a privileged VM (alongside iPadOS VM) on a minimal bare-metal hypervisor, does that open the door to unprivileged Linux or other user VMs safely running alongside iPadOS on iPad Pro?
Though I will admit I definitely misread it that way at first.