The hardware could support a physical interlock, like Chromebooks and developer mode, that causes the machine to be unable to make attestations that it's runnin

The hardware could support a physical interlock, like Chromebooks and developer mode, that causes the machine to be unable to make attestations that it's running in its default trusted mode. It's not as if trusted execution systems are required by some law of physics to also exclude owner control complete. Just make the mode switch between owner-control and manufacturer-control one that assures that untrusted state can't be maintained when the mode switches back to manufacturer-controlled. re: the business model - Put a price on flipping that mode switch. That solves the business model problem too.