Unless there's some trusted hardware involved, I doubt that effectively prevents malware from getting them.