Side channels, I/O leakage and denial of service are outside enclave protection

Tinfoil's documentation lists timing, power and electromagnetic side channels, host observation of access patterns and I/O, denial of service, supply-chain compromise and rollback as limitations ².