Agree. Saying TPM is bad is same as saying Encryption is bad. It’s not about the technology. It’s about the evil hearted corporations using these technologies to limit user freedom.

I replaced Raspberry Pis with Intel NUC mainly because NUC comes with TPM 2.0. I can now encrypt my drives without storing the key in plaintext.

I could not read the blog because it blocked me for using VPN (speaking of DRMs :) ). While I agree DRM is evil and should be ablolished from user’s computers, readers should not get wrong idea about TPM. It’s what protects your phone and servers from attackers. Desktop would also benefit from it a lot.

Not only is it resource‑intensive, but Qubes also lacks Secure Boot and Wayland support. Secure Boot is critical to ensure the OS has not been tampered with, and Wayland is required to isolate individual apps running within a single VM from capturing input intended for other apps. For an average user, I would recommend SecureBlue rather than Qubes.