Looks like so. From https://rogueai.github.io/posts/arch-luks-tpm/#unlock-the-luks-volume-with-tpm https://rogueai.github.io/posts/arch-luks-tpm/#unlock-the-lu.

Looks like so. From https://rogueai.github.io/posts/arch-luks-tpm/#unlock-the-luks-volume-with-tpm https://rogueai.github.io/posts/arch-luks-tpm/#unlock-the-lu... 'From a security point of view, passwordless LUKS unclocking might look like we’re giving up some security, as booting will go straight to login without asking any password whatsoever. We’re indeed trading a bit of security in favour of convenience, it’s important to note though that binding the LUKS to the TPM ensures the volume will only unlock in our machine, with Secure Boot enabled and our signed boot image.' So there we are somewhat breaking 'Secure Boot' process in general.