> key attestation (where you verify that the key was generated on a legitimate TPM) This is the same problem, just one level further down. The scheme depends o

> key attestation (where you verify that the key was generated on a legitimate TPM) This is the same problem, just one level further down. The scheme depends on hardware acting against the desires of its owner—whether we're talking about the entire system or just the TPM portion. The privacy concerns are real but not the full extent of the problem.