The biggest issue I have with TPM is that it's overly sensitive to the device configuration. Plug in an extra mouse at boot and I'm locked out of BitLocker (it asks for the recovery key). That's too dangerous for my data, at least for my personal use. VeraCrypt works better in that aspect.