I agree with everything except this: > Things like TPM and "secure" boot were never envisioned for the interests of the user. I am successfully using TPM with

I agree with everything except this: > Things like TPM and "secure" boot were never envisioned for the interests of the user. I am successfully using TPM with coreboot and Heads, with my own keys, to protect against boot attacks on my Librem 14 with Qubes OS.