There's a TPM-like mode with hardware isolation built into ARM for years, used for disk encryption keys, DRM, auth keys, fingerprints, etc on IOS and Android. See: https://en.wikipedia.org/wiki/Trusted_execution_environment