The thing holding me back from the win11 upgrade is turning on my TPM. Not a fan.
The FUD around TPM is massively blown out of proportion, which is frightening considering the HN is supposed to be a tech savvy userbase driven by facts rather than FUD.
TPM is basically a secure enclave for highly sensitive private keys, similar to what the T2 did on the Macs. It's much safer to have important private keys stored there than on disk and in system memory where they're in reach of basic exploits like Mimikatz or Javascript vulns coming from your browser.
"Asus TPM-M R2.0 14-1 Pin TPM Module"