As I said in a sibling comment, think if it more as a way of reducing your TCB in cloud environments. Instead of trusting the whole cloud software stack, you now just trust your app and the hw, both of which you need to trust anyway.