> junkies breaking in and flogging the drives

For this you dont need TPM. Just a LUKS key in rootfs /etc. He said TPM :)