> You can't really process on a machine that has a compromised urandom/TPM

Naive question: does zero knowledge proof solutions help with this?