https://esphome.io/ would make the software side of this a 10 minute job

As someone else mentioned, a software-oriented solution is likely to introduce more failure modes because of the number of dependencies, updates etc.

Updates? To an ESPHome device?

Isn’t that what they advertise as a “feature” on their website?

This, I'm very surprised they didn't go with it.

At which point they will be stopped by Ubuntu login screen which requires user password (or fingerprint, pin, etc).

Basically there are two options for have to enter 1 password: 1. TPM disk encryption + login password. 2. Password for disk encryption and automatic login (doesn't support multiple user accounts well).

no, I mean the attacker boots his own copy of Windows or Ubuntu, which is supposedly trusted by the UEFI keys. Will tpm somehow detect that it shouldn't unlock secrets for this boot?

Yes. The PCR state after booting won't match that of the regular system, so the TPM will refuse to give up the key.

This is contingent on the sealing policy including PCRs that would change as a result of booting a different operating system, like PCR 11, which, when booting a UKI, contains those measurements. Only sealing against PCR 7 would allow this attack, since the default platform secure boot policy would not need to change.

Cigna posted a single 570GB gzipped JSON that barely qualifies as machine-readable

What is the problem with cyclists cross the road on a pedestrian crosswalk (with a reasonable speed of course)? In some European countries cyclists are actually forbidden to take direct left turn on the road and have to use pedestrian crosswalk for that.

The article is pure FUD spreading.

"potentially being able to eavesdrop on our conversations", so now any app which has access to microphone "may be listening"?

So it uses data which you are willingly share with it to "serve better ads". Where is a problem with that? Does the author prefer worse ads?

>Where is a problem with that? Does the author prefer worse ads?

I certainly do. I do not want ads at all, so I prefer them to be as least relevant to my interests as possible so the chances of them distracting me from what I was doing -- on the rare chance that my ad blocker fails -- are minimized.

I also don't like seeing ads about things I just looked at at Amazon on other websites. It gives me the impression that this new website I'm looking at knows what I'm shopping for.