The default TPM trusted key RNG source from the beginning was the TPM. Jarkko has attempted to change this to the kernel RNG numerous times. Here's latest version of changing the TPM trusted keys RNG source: https://lore.kernel.org/linux-integrity/20260125192526.782202-2-jarkko@kernel.org/