The AWS Nitro System provides strong security isolation, as AWS has no access to customer VMs running on it