> a secure enclave that will only release the key given the correct PIN

So...a TPM?

> This seems like it isn't worth the cost in authoritarianism?

You know what's really authoritarian? Having your computer practically only decryptable by some remote directory server, potentially not even under your control.