Similar attacks have already been demonstrated for other TEEs so nothing majorly new here (although the details are obviously different). The first work I'm awa

Similar attacks have already been demonstrated for other TEEs so nothing majorly new here (although the details are obviously different). The first work I'm aware of is an attack paper called CLKSCREW on ARM Trustzone. There were also some similar attacks published subsequently on SGX (Plundervolt). It's a hard problem to solve I think. One of the major dividing lines is whether the attack can be performed remotely (i.e. software only using OS power management APIs), or whether it requires physical access. The former obviously has more impact but most likely is much easier to mitigate than physical attacks.