Yeah, the TPM requirement is awful for it's own reasons but the silver lining for me was I could just make sure the TPM was disabled and not have to run defense like with the Windows 10 stealth upgrades. But of course, I knew that was to good to be true.

That said, I only personally run Windows in VMs these days and I have them all set to seabios so I have a second defense.