e., a GPU, and bootstrap a safe channel to it. A destructive host procedure could always do a man-in-the-Center assault and intercept and alter any communication to and from a GPU. Thus, confidential computing couldn't https://honeypotz.net