It was mentioned in second paragraph, that there is basically no security that can be enforced since root, can load arbitrary modules into kernel.

So, how does the localities of TMP, solve the problem of rogue root installing custom TPM kernel module, that have access to locality 1?