The top threads here have commentary: https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu... especially https://news.ycombinator.com/item?id=41937664

IMO - while nothing is a guarantee against a state-level actor that can compel both hardware-level bypasses and put such bypasses under a gag order, it's a well-thought-out system under those constraints. The idea of a self-auditing and self-healing fleet that requires simultaneous compromise of software and enclave hardware is a meaningful level of defense in depth against literally everything else.