In-transit documents tend to be more vulnerable than at-relaxation data as You can not reliably avoid eavesdropping when sending messages over the Internet. While a TEE is isolated from the remainder of the machine, a trusted software that runs in a TEE will normally have access to the entire ability accessible of a device's processor and memory.