[hueving]

I wouldnt describe that as a huge source considering it requires a tpm vulnerability in secure-signed envs.

[walrus01]

This specific platform has all of the tpm module feature set disabled, no? Since the code running inside the tpm is proprietary and closed. To the best of my knowledge super gpl zealot users rarely choose to store a key in the tpm for full disk encryption unlocking purposes.