The TPM can be programmed (ie designed) to lie about the whitelist though.