It's possible but complicated.
Since apps have access to the TPM API they can encrypt their own data in such a way that only the app's own authorized processes can retrieve the decryption key from the TPM chip
It's possible but complicated.
Since apps have access to the TPM API they can encrypt their own data in such a way that only the app's own authorized processes can retrieve the decryption key from the TPM chip