Because the hypervisor manages guest operating systems, creates images and controls hardware resources, access to it is limited to authorised cloud administrators, so that an end user cannot install a malicious guest that reaches other VMs' memory and a low-privilege VM cannot escalate through the hypervisor's resource allocation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.