You need a secure OS to protect a TPM against brute force attacks. You need secure boot to get that. Why do we want a TPM? Because it gives guaranteed secret p

You need a secure OS to protect a TPM against brute force attacks. You need secure boot to get that. Why do we want a TPM? Because it gives guaranteed secret private keys. This means the keys can never be stolen, not even from RAM.