That's pretty interesting. I wonder if replacing the signing keys could help negate DRM-y uses of the TPM
If you replace the manufacturer’s signing keys with some keys you generated yourself, the only real effect is that your computer can no longer do remote attestations. So you can no longer convince any 3rd parties that your computer is operating in a “secure” mode.