The TPM things was mostly a showstopper if you upgraded from Windows 10 but easily bypassed via a clean install.
The real showstopper would be if "SecureBoot" would be enforced. I hope it never actually happens for personal computers. Everything else in the consumer electronics business is pretty much a lost cause already.
SecureBoot prevents a very dangerous set of persistent rootkits that are completely invisible to the OS, not sure why tech savvy folks are against it for the vast majority of computer users, even Linux ones. Many UEFI setups allow you to add your own keys to the EFI and self-sign.
>Linux always boots perfectly fine with TPM hardware support disabled, even when there actually is such a chip built in
That would mean Linux is less secure in that scenario since the TPM is used to secure store things like hard drive encryption keys.
This is the end game. Widespread hardware and software support with default off, then default on, then always on. All to protect users from themselves of course.
Yes. They are more secure for the manifacturer. Do you want to give this app access to your files ? To all your files. And it phones home. Encrypted so you cannot see.
Right now, I am looking into repurposing an old thin client as a daily driver machine.
they also make great plex servers, due to intel quicksync for transcoding videos.