I think you’re still misunderstanding how this would work. So this battery swap setup is like the equivalent of going to the gas station. Basically, when your battery is close to being dead, you head to this place and get a fully charged battery. So it doesn’t matter that the battery is used, you just keeping swapping batteries out when you need it. Sure it would be annoying to know that when you bought the car, it came with a fresh battery that would get swapped out with an older battery, but you would have bought the car to get into the swapping system since this is mainly for folks that can’t do charging at home.

I think the battery swap is more like this.

https://www.youtube.com/watch?v=hNZy603as5w

No need to worry about pervious owners or anything. The system charges and maintains the bank of batteries you swap with.

If I don’t own the product after purchase, the button shouldn’t say “buy/purchase” it should say “rent”.

I do like the idea of industry standard license.

My thoughts are:

• They need to limit EULAs to something like 600 words.
• Make them binding and non-changing to the product purchased, only newly purchased products can get the updated EULA.
• They should make a Ethics Policy (things like no cheating, be kind, no swearing, etc.) separate from the EULA. This Ethics policy can be updated whenever.

How is it fiddly for Windows users?

What do you mean by that? Generate a new private/public key pair every time you setup a new TPM? Or when you boot the system or something?

You can’t do that since vulnerability is the connection between the TPM and the CPU, you need to encrypt that path.

The private key would have to stored in clear text somewhere. Potentially if you had non volatile space on cpu that to store the private key, that might work. But if you’re going to do that, might as well just use an ftpm.

No, there are no fees at all. Authentic just means approved device state, which will be defined by the website you go to I believe. So youtube might required many different things in order to be “authentic” like no ad blockers, genuine browser, non-rooted phone, etc., whereas bank-xyz may just check for one thing, like a genuine browser. Also, websites have to enable this on their side, so its not going to be used by default on all websites. The whole thing is crap though, even if only a few websites enable this, it could have huge impacts.