Exactly. Using _just_ TPM is like locking the front door to your house, and leaving the key in the keyhole.

Sure, the door is locked, but it's still very easy to open.