Essentially, the TEE really should verify that it's authentic just before it can be trusted: this method is referred to as attestation. The good news for providers is definitely the emergence of In-Use Encryption. https://aistudio.ml