Hacker News Reader

Just a guess, but the TPM is probably for secure boot, just like on a Chromebook. Since security is one of the selling points.

https://www.chromium.org/chromium-os/chromiumos-design-docs/...

That would make sense. We'll have to wait and see if the OnHub has a "dev" switch like Chromebooks. Hopefully it will be possible to put custom software on it (even if the Google software is just fine, the flexibility would be nice).

I have the same set up as you do. EdgeRouter Lite with an old Linksys E2000 acting solely as an access point. OnHub might be a good replacement, but I’m wondering if it supports VLAN tagging as I’d like to separate my private network from the guest network.

Interacting with security hardware? Smart locks, FIDO alliance protocols, etc?

That would not be an option I'd consider. I think controlling your locks without the use of an outside entity is the safest way to avoid problems.