This sounds scary. Remember that the vast majority of security is possible to overcome if someone wants your stuff, you in particular. Most security exists to make it too expensive/annoying/worthless to bother. Once you crack the TPM, do some soldering, and decrypt, <cont>https://twitter.com/marcan42/status/1080869868889501696 …
What I described is not a "targeted nation-state level attack". Anyone with $100 in parts and some ingenuity can pull it off. This is easier than, say, running ATM card skimmers, which is a big problem in some places already.