Please note: A well-funded organization, like a government, can derive the keys from the TPM hardware using an electron microscope.

Also note that there are plenty of viable attack methods that don't even require key extraction, such as asking the TPM to sign arbitrary data.

That's assuming they don't just have a backdoor inserted expressly for this purpose. Now only the rich or powerful can produce an "authentic" recording of an event and the same system can be used to hunt down whistleblowers and political enemies by looking up who bought the camera.

At the very least there is always the analog hole where you point the camera at a sufficiently high quality screen. The sensor can't tell whether the light it receives was emitted by sunlight reflecting (and refracting) from someone's face or by a bunch of LEDs pointed at the sensor.