A cloud provider secures physical hardware. What remains the cluster operator's responsibility in a self-managed cluster?

1. Every physical access badge at the provider
2. Manufacturing the host processor
3. Secure cluster configuration and workload access
4. Ignoring node security because hardware is protected