If the company controls the enclave, and controls the software that contacts the enclave, how do you know that your messages only flow to the enclave and aren't also logged somewhere else?
Attestation can get you the idea that the software they're running is what they say they're running, but unless you constantly audit every version, how do you know that it operates exactly how they tell you?
I mean how do you know there's really an enclave there at all :D If your threat model is "this entire provider is untrusted and potentially hostile" it seems like there's lots of options for them to do bad things, that can't be fully solved by secure enclaves.
Attestation can get you the idea that the software they're running is what they say they're running, but unless you constantly audit every version, how do you know that it operates exactly how they tell you?
I mean how do you know there's really an enclave there at all :D If your threat model is "this entire provider is untrusted and potentially hostile" it seems like there's lots of options for them to do bad things, that can't be fully solved by secure enclaves.