Encryption does not help in this case. They have complete remote control over the entire CPU so they can just run the decryption code directly.

Encryption only helps if the endpoints that can get access to the plaintext are not compromised.