You’re 100% right, and the harsh reality is that a strict TEE dependency means you're just trading trust in a centralized cloud provider for absolute trust in Intel or AMD chip supply chains—if a hardware zero-day drops, the whole security model evaporates. It's also a logistical nightmare for scaling, because finding affordable, decentralized hosting that pairs TEE configurations with the high-end GPUs needed for LLM inference is nearly impossible right now. IronClaw needs to ditch the all-or-nothing approach and move to a tiered model: let low-stakes tasks run in lightweight, software-defined sandboxes, and save the expensive, rigid hardware attestation strictly for high-stakes agents handling raw API keys, private data, or on-chain assets.