tee.fail is a great resource, but people often misinterpret it. most of the attacks are side channels or implementation bugs, not “tees don’t work.” compared to a regular server, a tee is still a massive security improvement