That achieves nothing. A hypervisor can see and manipulate any VM it runs. By extension, a compromised kernel can do the same.

On Android this isn't true with support for protected virtual machines.

How about with homomorphic encryption?