How good a job of OS security would we say MSFT is doing apart from TPM 2.0?
Bite me Microsoft. You are creating e-waste. I have a perfectly good computer running a 4790k, 32 gigs of RAM, faster than my brand new work laptop, and you're looking to kill it.
These excuses are nothing more than bullshit.
I mean, they aren't lying. The part they aren't saying out poud is that by "secure" they mean for their business partners against you, the end user trying to use the device you bought in ways they would rather you not.
load up some arch or some debian on it and never look back.