That avenue of attack is exactly what TPM is supposed to protect against. It provides a piece of hardware that can't be spoofed to a virtual machine without a way of extracting the cryptographic keys from the chip it's self (which is theoretically possible, but practically impossible).

I'm assuming that the presence of a TPM is part of this whole SecureBoot thing.