Yeah, this has actually been a known thing for a while. The government has been sneakily getting their hand into NIST standards and trying to ensure they have back doors in the commonly used "best practices".

So as a result for instance, encryption based on pseudo random numbers generated with hashing algorithms are actually safer that these theoretically "actually random" numbers generated in dedicated security modules in hardware.

Trusted computing was never about security, it's a way to take ownership of computers away from users and give it to computer manufacturers and Microsoft. It's also not a good security model.

Can You Trust Your Computer? by Richard Stallman

Well that’s OK; we recently discovered that things like passkeys usually aren’t using the TPM anymore anyway. Most stuff stored in there can be routed around via tokens stored on main storage.