Your second point is exactly what the German government is afraid of according to the article. According to the article there seem to be security vulnerabilitie

Your second point is exactly what the German government is afraid of according to the article. According to the article there seem to be security vulnerabilities on 3 levels in TPM 2.0, which might be used by intelligence agencies - the article states NSA and China who is actually producing most of the TPM chips.