Just makes it more annoying to implement. Your locally running CLI tool will still have access to the local TPM the browser used: in other words, the CLI tool can implement the necessary parts of the browser.