[Borealid]

I don't think any of the attacks being discussed are actually attacks on the TPM's own threat model.

I think they're attacks on Windows' measured boot approach.

[GTP]

Indeed, which shows that the TPM isn't a fimsly lockbox.