In the TPM threat model, the attacker is you, and the defender is your employer who wants to make sure that you don't exfiltrate keys from your work laptop to any other (i.e. unauthorized) device.