I specialize in TPM security and know plenty of ways to bypass it with physical access to consumer laptop hardware, and would gladly make that easy for the public if needed.

But I hope they try this. It will be funny to watch the public humiliation of how hard it fails at scale.