The container image sharing problem is not solved yet. Every time a POD is created the container images are downloaded inside the VM TEE. There are proposals to enable sharing of container image layers for confidential containers https://docs.google.com/presentation/d/1lBKVrYzm9JEYuw-gIEsrcePSK0jL1Boe/edit

https://docs.google.com/presentation/d/18FtlkRh3yKgXrImuELxjZMRZVUP7twiD/edit?rtpof=true&sd=true