Comment by sq_

A physical TPM with their overall high-quality software support would be awesome.

I've spent far too much time messing around trying to get TPMs working over SPI or I2C to meet security requirements with 4Bs and 5s over the years.