The late launch model is where a DRTM provides the most value over a static root of trust, as it is not even really possible to extend the SRTM to this point for most OSes.

What's the rationale for tboot not being a late launch project? My understanding was that the whole point of TXT was to enable late launch.