that's still less secure, though. without a TPM you have no guarantee of the underlying state of firmware on the device. this enables a persistent backdoor.
TPM with no PIN is practically bitlocker with no password. A high entropy PIN happens to solve this entire attack.
TPM with no PIN is practically bitlocker with no password. A high entropy PIN happens to solve this entire attack.