It's an enterprise feature that the enterprise won't touch until it has proven itself. We have the honor of being the guinea pigs.
The problem as I see it, is once Microsoft gets to sign off on anything and everything you can boot on your hardware, you don't really own the hardware anymore. Just like in consoles' case.
Well, US DoD mandates systems used under their jurisdiction or that interface with DoD systems use TPM. So, there you have an enterprise class user.
Bitlocker can also use it, though it's not mandatory AFAIK.
Intel's Theft Deterrent also used TPM (though I don't know the current state of that software)
Chromebooks have TPM and is part of their security model,not just for boot purposes but also for login and to protect the encrypted store.
All those OEM systems with Connected Standby also use TPM 2.0.
Plus Secure Boot itself.
Plenty of use IMO.