It's always seemed crazy to me that the TPMs are separate chips rather than being integrated with the CPU; at least in the same package if not on the same die. That would make the bar for attacks like this much much higher.
If the latter, I think we can expect a higher quality bar from an integrated solution. If the former, well, I guess that’s just a security trade off.