Out of curiosity, I thought I'd see if a physical TPM module is available for my motherboard. Looking in the manual I see there is a header for one, and gigabyte has a specific model number for the one that is compatible.
None are in stock anywhere save a couple of entries on ebay where the normally $15 module is now listed at $170 :-).
A KVM emulated one is clearly the way to go.