Yes, it is. You do have to have some infrastructure you trust somewhere to validate an attestation report from the confidential VM.