> If you grep the three volume 1000+ pages of the TPM 2.0 architecture documents, you’ll not find a single mention of “threat model”.

Because they're embarrassed to state it.

The TPM threat model is: "the machine's owner is the threat".