I keep screaming about how the TPM 2.0 requirements of Windows 11 are insidious due to the ability to implement remote attestation now. I don’t think they’ll spring the trap immediately, but it’s locked and set and you’d be a fool to believe it won’t happen eventually.

Remote attestation allows changes to the user’s computer to be detected by authorized parties. For example, software companies can identify unauthorized changes to software, including users modifying their software to circumvent commercial digital rights restrictions. It works by having the hardware generate a certificate stating what software is currently running. The computer can then present this certificate to a remote party to show that unaltered software is currently executing.