This is what I mean when I say adopting the TPM is a fool's errand; I think protection against evil maid attacks is impossible.
Unless you're willing to go full iphone/xbox with no third-party hardware or OSes.
Unless you're willing to go full iphone/xbox with no third-party hardware or OSes.
And even then, you still have the entire 1st party OS attack surface to play with. Which is just _huge_ specially considering this evil maid scenario implies you have a large amount of time with full control of the device itself and all its hardware.
These evil maid scenarios are so academical in nature by now, that there is practically no way to defend against them outside academia itself.