Huh? It's not even available yet, so of course there aren't any programs using SGX remote attestation. Regarding your second point, one of the main use cases is

Huh? It's not even available yet, so of course there aren't any programs using SGX remote attestation. Regarding your second point, one of the main use cases is likely to be the cloud computing market where you want to do remote computation over sensitive data (requiring it to be decrypted inside an enclave). If an attacker knows the machine's built in key then it can read any encrypted pages. Or maybe I'm misunderstanding your comment?