Apparently, not even TPM+PIN is safe from YellowKey.