Secure enclaves can solve the problem once for all. I don't understand why is not applied (given the support in current hardware).