panchoop
The TPM is also used for device authentication. It prevents the leakage of certificates that are used to ensure that you are using the device you claim to be using. This is highly relevant when having remote access from users and one would like to enforce tiering rules together with privileged access workstations.
Furthermore, the second example in which "the attacker already won" is missing the context. The attacker does not want to access the computer (in the industrial example), it wants to use to escalate access within its organization. The TPM can be used for remote attestation, that is, a remote server can verify the integrity of the boot process of the device before giving access to remote resources. In other words, it can be used to check for device compliance.
It is definitely a positive for enterprise security.
My main weak point of entry is that I was applying to a consulting job in Data Science, and as such, it is not really possible to argue that there is no-one else left in the EU to take the job. Having a degree from the ETH indeed helps, but it wasn't enough.
They have enforced quotas per canton, which means that once filled, no-one else is getting in. Furthermore, Swiss bureacracy is the most strict one I have seen in my life, so there is no much wiggle room to bend the rules.
This is not "just in paper". Some weeks ago I got a job offer widrawn from a company in Zürich because of this reason; me being a PhD in Applied Mathematics (granted by the ETH Zürich) but with a non-EU nationality.