Which wouldn't really be an issue if all the trust wasn't unnecessarily put on a single system, yes. This is the equivalent of a rubber hose attack, where your

Which wouldn't really be an issue if all the trust wasn't unnecessarily put on a single system, yes. This is the equivalent of a rubber hose attack, where your OS vendor is being threatened and can give away your information retroactively. That's ridiculous to even consider allowing if you're selling something as "securely encrypted", just make it E2EE (derive the key rather than directly using the TPM's data).