CPU-based TEE solutions (such as Intel SGX) restrict protected memory (EPC) to a small capacity, causing large model workloads to frequently trigger memory swapping, with performance overhead potentially reaching several times to tens of times.