actually tpm 2.0 can build a secure communication channel to send the key to the cpu and thus makes that a unlikely attack. of course there are many more attack vectors, but this possible one can be prevented with a correct communication channel. https://trustedcomputinggroup.org/wp-content/uploads/TSS_ESA...