I have seen it in action for the full disk encryption coming off the TPM device. It's impressive stuff. There is a lot of thought into making this very secure,

I have seen it in action for the full disk encryption coming off the TPM device. It's impressive stuff. There is a lot of thought into making this very secure, and accounting for edge cases. It stops all manners of attacks that you normally just have to live with.