I am talking working around attestation for someone who operates the computer and wants to subvert SGX enclaves. Whether you need physical access or not is thus inconsequential.