> with the exception of a few people who signed NDAs and researches that have knowledge and tools to poke into it. This is good enough for the 90% of people wh

> with the exception of a few people who signed NDAs and researches that have knowledge and tools to poke into it. This is good enough for the 90% of people who currently operate without full-disk-encryption at all. It would be a huge improvement. Obviously, it's up to each individual user to evaluate their threat model and proceed accordingly. Nobody is forcing you to use a TPM, you can still use LUKS/etc and completely ignore the TPM.