> once the TPM is exploited This is not addressing my question. It's not the TPM that's exploited but the SP. If the SP is compromised then the whole host is

> once the TPM is exploited This is not addressing my question. It's not the TPM that's exploited but the SP. If the SP is compromised then the whole host is compromised.