Earlier quoted context omitted.
Isnt the weakness here that there was nothing encrypting the actual key? On a laptop luks key stored in a tpm would usually be encrypted using your passphrase
The NTSB report noted that if the TrustZone secure enclave system was being used, then yeah this data would be toast. But it speaks more to Oceangstrs negligence that this situation even existed: why wasn't any potential encryption keys escrowed ashore to ensure they could be recovered later? This shouldn't have even been an issue.
Oceangate should take the blame for a lot of things but probably not this.