> TPM and Secure Boot would be good things if there were no way to prove to third parties that you're using them, or have them configured a certain way (i.e., remote attestation).
This is exactly what a TPM was made for, so your statement is a little bit paradoxical.
This is exactly what a TPM was made for, so your statement is a little bit paradoxical.