Why is PIN insufficient? Assuming encryption algorithms are sane, a 20 character long PIN should be able to achieve adequate entropy to keep the data safe.

By... compromising the SP, thence the fTPM, but compromising the SP is sufficient to compromise the whole host so...