we lock down the nodes themselves so that only the hypervisor has direct access. we take this pretty seriously.
State level actors will snoop the bus.
You don't need to be a nation state to defeat this even if it's set up "properly", you can use low-cost interposer attacks like https://batteringram.eu/ to alias the guest's memory into another guest that you control.