Doesn't that preclude paravirtualization drivers? Seems like a major tradeoff for daily driver desktop stuff.
It also passes obvious "Xen emulated drive", and similar for all hardware interfaces.
Passes CPUID.
Can't stop any of this with Qubes/Xen. But is trivial with Proxmox/KVM.
Honestly, I wish there was a Qubes/KVM variant. It would fix every complaint, and enable running potentially malicious software (MS windows) and lie to it regarding hardware interfaces.
Relayed Issue: https://github.com/QubesOS/qubes-issues/issues/7051