It depends. My expectation is that the TPM holds a key that's used for FDE, and if you have a password that password is used to get that key. So the password wi

It depends. My expectation is that the TPM holds a key that's used for FDE, and if you have a password that password is used to get that key. So the password will only increase security if it's used to encrypt the TPM's key, but if it's just used to authenticate to the TPM, it wouldn't. Someone more familiar with TPM 2.0 could likely answer this authoritatively, but my assumption is that it's the latter. Properly leveraging TPM 2.0 features would likely be the best way to solve this problem.