Sending the key over the SPI bus unprotected is pretty incredible. If it really is that simple, then the whole TPM is pretty easy to bypass. Plus the whole thing about finding another chip is just to ...