Physically separate infrastructure as well as local employees help to some extent. But it is not really sovereign cloud. There is no guarantee that employees would know if some commands are illegal. Plus parent company can fly anyone there if needed.

Plus some staff could be dual citizens with loyalty to the US