A big part of it is not just hardware based security, it's virtualization based security (VBS). Essentially adding a hypervisor layer under Windows that manages access to sensitive processes like lsass, which handles credential material. This is a huge improvement in the Windows security model, and even if there are bypasses, they are non-trivial and consist of more than just elevating to admin/SYSTEM as is the current case.