> It's not an either-or. You can combine TPM with passwords which makes it far more secure than password alone.

No. I have already explained it here: https://news.ycombinator.com/item?id=48133491