Did Synology just hire some brain dead Broadcom executive?

Well, Citrix's CEO was Broadcom' software boss

And also hasa place at the US treasury, he's DOGE-affiliated as well: https://www.crn.com/news/cloud/2025/citrix-parent-ceo-krause-on-doge-role-we-re-applying-public-company-standards-to-the-federal-government

Xcp-ng might have the edge against bare metal because Windows uses virtualization by default uses Virtualization-Based Security (VBS). Under xcp-ng it can't use that since nested virtualization can't be enabled.

Disclaimer: I'm a maintainer of the control plane used by xcp-ng

But the individual network packets are usually at most 1500 byes long, and applications encrypt the content. Hashing doesn't prevent jack squat. It's more likely to be DNS + IP blocks