Quoting a random article from when this was initially announced: > Google says that if researchers manage to find "a full chain remote code execution exploit w

Quoting a random article from when this was initially announced: > Google says that if researchers manage to find "a full chain remote code execution exploit with persistence" that also compromises data protected by Titan M, they are willing to pay up to $1 million to the bug hunter who finds it. So a compromise that doesn't require physical access or root, presumably. Cue also the inevitable discussion that bug bounties are too low.