The 1990s just called. They want their article back.

No one is still running a lot of bare metal. Everything is virtualized at the bare minimum, or containerized or Serverless code.

Furthermore the article doesn't really teach you anything new except for the existence of the hypervisor layer. Threats and controls are mostly the same between physical and virtualized.

:Edit: just saw you wrote this article. Sorry for the harsh criticism, but I stand by it. Try to be more accurate with your threat and control assessments or write about more niche technology.