Most Desktop As A Service providers store their virtual hard drives and the VMs RAM in a way that allows them to access their contents.
Of course choosing a provider who offers a 'no-knowledge of server' option looks like the easiest solution, but companies rarely choose those, and there are significant financial consideration to changing a cloud provider after you've initially chosen one.
So, what would be the theoretical steps to secure encryptions keys and their associated databases?(encrypting things like basics OS programs is not required).
What would be the steps to encrypt the whole filesystem and RAM (since data can stolen if accessed while in RAM) if encrypting only the sensitive data turns out to be more expensive?