That seems like a good idea if you are a corporation.
It also is fixable, you can add other keys to unlock luks.
Personally TPMs can go fuck themselves on all my devices. If someone has physical access to it you have to consider it pwned no matter how many “security chips” microsoft told the industry are absolutely necessary to run their malware of an os.


Honestly I usually don’t use either sleep or any suspensions. I prefer to turn the device off, since turning it on will take less than 20 seconds anyway.
It was also a lot less supported some time ago so that is the reason I avoided it originally.
I feel like these weird sleep things are some windows heritage to avoid reboot updates and edge browser queries or whatever other crap flies over there.