Maybe check with modern sparc or power or arm if you want hardware guarantees for always on and really secure if it's worth it to you. personally, I don't have any real experience other than what I've seen in tech specs but I'll bet at least one of them has something more competent than tcg, which ought to have been the first indication for a lot of people that x86 platforms are kind of half assed