Comment by mkopec

Well, by sealing the LUKS key to a TPM you can get rate limiting. Of course then you need to trust the TPM to do its job correctly, and we're back to the same potential issues as with HW disk encryption, but to be honest I'm going to trust a TPM over OPAL any day. Especially the Google Ti50 in my chromebook.