The security requirement is 'arbitrary'? with all that ransomware out there.
Microsoft's main response to the ransomware threat is to encourage you to buy a Onedrive subscription because apparently Onedrive automagically defends against ransomware. That should tell you all you need to know about MS' security-related excuses.
If Onedrive works the same way Dropbox Rewind does, it certainly could revert the effects of ransomware after the fact - but that's remediation and not "security", nothing to do with TPM and Secure Boot, and if Dropbox is any indication it won't be afforded as a service to free users.
The TPM is used for Bitlocker and credential storage as it always has, and will never prevent a ransomware attack. Secure Boot might, but only if it's enabled - Win 11 only requires Secure Boot capable hardware, and does not actually enforce a Secure Boot protected installation, much like Win 10. Regular users are unlikely ever to enable Secure Boot by themselves, you're more likely to find a Secure Boot-protected installation out of the box on a prebuilt desktop or laptop. Likewise, Windows Smartscreen could save you in a pinch, but that's a poor idea to bet on and again nothing new.
