There it is. Money shot in one of the references: >Because this is a (unmitigable!) hardware issue in all Falcons which have SCP, not just TSEC -- we were also

There it is. Money shot in one of the references: >Because this is a (unmitigable!) hardware issue in all Falcons which have SCP, not just TSEC -- we were also able to use the same attack on the Falcon unit used for GPU power management, recovering its (different) signing key as well. In short, the same methodology, assuming you put a crap ton of time into reading this, and really grokking it, suggests this attack could be applied not just to Tegra, but any secretful Falcon.