I think I just threw up in my mouth a little.

People call me paranoid, but after my dad’s MS Surface spontaneously encrypted itself and lost the recovery keys, my belief is that what you described is the goal they are working towards.

Apple already does all of this along with client side scanning and MS is falling over itself to implement the same ecosystem.

That was a big concern when TPMs first started appearing. I'm glad that that didn't go the way it might've. Yet.

Hardware alone is not a working computer. If you control the software running on your computer then that software is yours (like it's your book on your bookshelf even though another person owns the copyright). If someone else controls your computer then that erodes your ownership of it.

That you should have the option to run locally without calling back to home base without a special pass from MS.