TEEs like Intel SGX/TDX allow this today (trusting just the CPU, but that is trusted already).