@liw Imagine a Yubikey that understands TPM quotes and can blink an LED at you during boot to tell you your laptop is in the expected state