Any security model that can not differentiate the device owner from a threat actor misses the point of who security is meant to protect. TPM and secure boot co

Any security model that can not differentiate the device owner from a threat actor misses the point of who security is meant to protect. TPM and secure boot combined can create computers that run key-per-cpu encrypted system binaries that can not be modified by the device owner meaning next time microsoft does something fucky there will be no path out, no programs to disable it, its just how you have to live now. Its not worth it to head down that path.