And even if you trust Intel completely; even if you believe that the NSA won’t use a FISA warrant to force Intel to attest to an enclave in debug mode; even if you’re not worried about an MDK compromise or the exploitation of side channels – then there’s still the risk of app-layer exposure, just as with HSMs (Ross Anderson, "#SecurityEngineering — Third Edition", PDF-Preview 2020-05-16)
#signal *eg*