It actually can be used to the benefit of the end user, at it's core concept it holds on to some secret and only acts upon the secret when certain conditions are met, so you do things such as:My board has one but I turned it off in EFI specifically to make sure M$ couldn't install Windows 11 on my system. How does this shit benefit me in the least? It seems to benefit anyone but me.
Allow users to use a short password by storing the real longer password and rate limiting attempts .
Not release the real password unless certain conditions are met (fingerprint, face ID etc).
Protect saved passwords from simply being copied out.
Prevent releasing the password if certain things change (software modified, chassis opened) etc.
Done right you can even replace saved passwords with fingerprint logins that can't really be phished or stolen.
But of course they interested in using it to load their keys on it and enforce behavior that they want.