Very relevant write-up, thanks! FYI, it seems that OVH has just announced black-box-free TDX support two weeks ago: OVHcloud Unveils New Dedicated High Grade Bare Metal Servers with Intel Xeon Gold Processors for the Most Intensive Workloads . The hope could be for more niche CSPs to follow suit here. Physical hardware access (side channels) will remain relevant, though.