Presuming, of course, that the TPM wasn't backdoored (or even just had keys held in escrow where the NSA could reach them), which would be more or less impossib

Presuming, of course, that the TPM wasn't backdoored (or even just had keys held in escrow where the NSA could reach them), which would be more or less impossible to verify.