TPMs are single threaded and can't sign more than about 10 queries per second so we simply put all dynamic content behind a proxy that requires a TPM backed client cert and solve the scraper problem that way
@mjg59 please no, I don't want TPMs to be yet another thing with an 18 month lead time and a 400% price hike because the AI people decided to build clusters of them