How can it do that, I thought the whole point of TPM and Secureboot, was so apps couldn't sneak in like that? Forgive my ignorance, but I've not really looked into it that much

I was really hoping this would **** over cheaters, and then eventually when it becomes the standard, when a game worth playing online comes out, it'll last for years cheat free.
I guess that's never going to happen. It's a shame it cant be locked down like the consoles can be these days (excluding modded consoles obviously)