Because a copied virtual machine can be started on an unsecured hypervisor and its data and configuration read, the resource pool of CPU, memory and storage I/O is protected from unauthorised access and change by tight logical and physical access controls that are fully audited. Images and snapshots, which may hold government data and (for snapshots) the contents of active memory, are protected from modification with measures matching the importance of the data processed, and every unneeded copy is wiped. When a virtual machine is deleted or moved to another physical server, secure deletion ensures no recoverable data remains on the disk.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.