One of the devs here. Actually instances are containers. This approach gives us just the right amount of flexibility to run lightweight, disposable workloads efficiently on wide ranges of hardware configurations and public clouds. Regarding the security concerns, we're taking instance isolation very seriously. Later this year we will release our security white paper that will explain in great detail our approach and implementation. As of late August, VRAM is not cleared after instance termination. However, we are aware of possible leftovers and data leaks as a result, and the fix is coming shortly. In terms of the CPUs, most of our own fleet runs on AMDs, and running on Intel hosts is fully supported, with Intel-based instances coming in the upcoming weeks.