Private Cloud Enclaves provide a server you don't have to administer that you can trust to be honest.

If you run a server yourself, you have to do all the administration. A pain!

If someone else runs it, you have to trust them to be honest. Dangerous!

Most users don't really worry about cloud providers peeking (e.g. Google looking into your VM).

Cloud providers are contractually obligated not to peek.

They're unlikely to bother with your small VM anyway.

The real problem is trusting the service provider administering that VM to do what they say.

Private Cloud Enclaves thread this needle.

Someone else can run the server (avoiding maintenance pain).

But you can verify they're being honest (avoiding trust danger).

Remote attestation is the key technology.

Allows verifying the VM is running exactly what it claims.

Creates trust through verification, not promises.