They’re a weird case, but they’re able to basically improve boot validation, they can store keys, and they can act as an improved secure random number generator.

https://wiki.archlinux.org/title/Trusted_Platform_Module#Using_TPM_2.0

A TPM is just a piece of hardware, just because you don’t like how Microsoft used it … doesn’t mean it’s some technology for oppression or something.

That said, TPMs are supposed to have manufacturer signed keys. TPMs could conceivably be used to properly block someone cheating in an online game from returning (i.e. a “hardware ban”) since the crypto can’t be spoofed (like an IP, MAC address, or serial numbers).