[ajross]

Destpite its use of TPM for tamper-proof storage, EVM remains a software security solution. So yes: it assumes an uncompromised kernel and key.