0
Device identity that is hard to fake: TPM, Secure Enclave and fingerprints
Component fingerprints change easily and are easy to spoof. A key created inside a security chip cannot be copied off the machine. Together they recognise real machines without punishing honest users.