TPM can work without PIN requirement imho. It makes environment measurements to decide that nothing has changed. Secure boot had to be enabled too to assert tha

TPM can work without PIN requirement imho. It makes environment measurements to decide that nothing has changed. Secure boot had to be enabled too to assert that bootloader is signed.