Yes. It's to ensure Microsoft always have full control over the code running on your device, so eventually Microsoft can require all Windows apps to come from its store, and you won't be able to do anything about it; because the hardware TPM module will reject any attempts to modify it.

you mean in the same vein as the huge epic apple trial? nah. sideloading and app installing will be allowed due to fear of government action. the tpm can ensure system files are not malware infected tho