The whole premise of the T2/Secure Enclave (or TPMs or whatever name is fancied this day if you want to talk non-Apple lingo) is that the disk encryption key (o

The whole premise of the T2/Secure Enclave (or TPMs or whatever name is fancied this day if you want to talk non-Apple lingo) is that the disk encryption key (or other private key kind of secrets) cannot be extracted, not by malware, not by knowing your password, not by electronic microscope, not -ever-.