Ahhh, ok that makes sense, they're in effect replicating Apple's method then. That does mean this can't really work on desktops atm, due to the low amount of pr

Ahhh, ok that makes sense, they're in effect replicating Apple's method then. That does mean this can't really work on desktops atm, due to the low amount of pre-signed TPMs there, so this API is only actually unbreakable for Google and Apple hardware owned mobile devices. Which is already pretty bad, and allows them to boil the frog on desktops! Thank you for the explanation! Edit: I wasn't aware Microsoft was already pre-signing basically all desktop TPMs, that's crazy. Makes sense thinking about it now, especially with Windows 11 requiring it.