You seem to be the one with no idea how a TPM actually works if you think what he said is in some way incorrect. All TPMs have immutable keys burned in at manufacturing time (called 'Endorsement Keys'), which are unique per TPM. This essentially makes your device identifiable at all times, regardless of where you are or whether you're hiding behind a VPN or such. There's so much ignorance on this subject, with people buying into Microsoft's BS about how it's just some harmless little module that's there for your safety. It's there for your identification and will be used for DRM purposes in the very near future. Hell, you could say it's already begun, with Valorant now requiring both Secure Boot and TPM 2.0 functionality to even launch on Windows 11. Enjoy the brave new future of computing, and remember that corporations and governments always have your best interests at heart, and just want to keep you safe from terrorist hacker pedophiles who are hiding under your bed
right now.