Awesome!
The recent introduction of 2FA Fingerprint Unlock for everyone was massive already. And now this!
When everything's in good shape, people will be able to run an ARM64 build of Windows 11 in order to use MS Office, Adobe Photoshop, perhaps even WSL2 (nested virtualization)?
On the Linux Terminal side of things, SecureBlue might be a good fit instead of Debian, as someone already mentioned. Not sure why Google picked Debian, since it has so many issues both in terms of security and outdated/modified/"broken" packages. It may be easier to maintain and is popular, but still...
With all these features getting introduced, a Pixel Book with GrapheneOS support can't come soon enough. Using a phone/tablet would necessitate a quality dock, separate mouse/keyboard and a display on a desk. Plus the security of non-Apple wireless Mouse/Keyboards seems questionable. So maybe wired ones may be advisable for such a setup?