This has nothing to do with TFA, you're thinking of the TPM2.0 which is unrelated to secure boot.
Secure Boot is part of UEFI. TPM2.0 is used only by bitlocker (at least for the average person, enterprises do store other keys in it).
Secure Boot is part of UEFI. TPM2.0 is used only by bitlocker (at least for the average person, enterprises do store other keys in it).
This isn't true at all, Windows Hello uses it as a secure credentials store.
The fact that Windows 11 won't work without a TPM is a bonus.