An attacker might be able to infer data belonging to other contexts, including data belonging to other guests.