Then cheaters will be able to just patch the game startup code so it skips the TPM check. If the game executable were encrypted to the TPM somehow, that might work then though.