This article was also published on Bitcoin Magazine:

The team at Sphinx is using the Validating Lightning Signer architecture to separate the keys from the Lightning node using a dedicated signing device
https://bitcoinmagazine.com/technical/validating-lightning-signer-separates-nodes-keys

This is a great idea, but it obviously doesn't impact the inherent problem of enterprise nodes being subject to the whims of the companies controlling the cloud hardware