> > TPM 2.0, Secure Boot, Measured Boot
    > Also all impractical for most linux users.

TPM 2.0 has been common for 8+ years. Many Linux distros support Secure Boot out of the box. I don't understand your concerns here. What am I missing?