Novas core seems to be formally verified which rules out a vast amount of bug categories that can happen with xen, including this one

Interesting, I'll have to learn more about Nova.

See Udos most recent talk at 3mdeb Boot Mastery Conference.

He is an ex Intel CPU engineer and the depth of his thought into the security design had me questioning my life choices.

https://youtu.be/RbL65gVzhNk for anyone else looking for it

Thank you. I'll definitely check that out.