Every SecretVM runs on attested hardware. You can verify the workload. You cannot peek into it.

That's the balance: transparency of integrity, without surveillance of data.