@dcc @dj @ryan @p @ins0mniak @lanodan
btw one of the reasons MS wants you to have TPM is because they by default enable a dumbed down version of BitLocker when you create an online account when setting up Windows. That's also why it's barely possible to create a local account on W11.

In typical MS fashion, it's just security snake oil as most of the physical TPMs in consumer and even business oriented computers don't use encryption on the bus and thus can be trivially sniffed. It's one of those scenarios where even a firmware TPM is safer, because you can't easily sniff data happening inside the CPU.
us-robotics-3com-total-control.jpg