Security Analysis of Multi-Zone TEEs