Earlier quoted context omitted.
I don't think it matters whether Chrome can add keys to TPM/Secure Enclave (as the article argues) or if it can only read the keys already in TPM/Secure Enclave (as you argue). In my understanding: both ways the key (either new or existing) could be attributed to the hardware owner, and not even an OS reinstall will help. Hence, my question.
Don't try to give oblique reasons. You are not forced to use DSBC. You are not even forced to use Chrome. Lots of people - lose accounts by installing malware. They don't care about giving info to Google. at the end, many already store passport data in Google Photos or drive. You can still buy coreboot/libreboot based laptops.
You seem to not have any answer to my question.