Is there a way from within the VM, though, to determine if that hardware feature exists and is enabled? If you don't trust your VM provider, how do you trust them when they tell you they have that feature and it is enabled?

Depends on if you don't trust them not to actually snoop on you or if you don't trust them not to get compromised by a third party. In the latter case you'd presumably trust that they deployed the feature claimed.