Confidential computing and hardware security are starting to be an actual thing now. They are mostly used for DRM and I would not trust them when your adversary is three letters long.

Hardware security used to be a joke. Now verified boot, encrypted RAM, key storage in hardware security models and hardware and OS attestation are getting somewhere.

But if you're important enough of a target to a state actor they will magically have some workaround. For your average raid on your home they might actually work depending on the specific setup.

For really high threat models you want zero trust models with E2EE as well as staying anonymous so no one knows where the hardware (and the people which might be much more vulnerable) are located. Tor exists for a reason.

Yep, physical access = game over. A tale as old as time. It doesn't matter who etched the silicon.

There's also no way around a $5 wrench, but you'd be hard pressed to find that wrench for $5.