Hardware-based trust mechanisms are essential for securing embedded systems against physical and software attacks. Although restrictive approaches like verified boot enforce strict code integrity, they often limit device reusability and owner control. In contrast, non-restrictive methods, such as measured boot and remote attestation, assess system state without enforcing execution policies.We present a secure embedded high-level Operating System (OS) architecture that exclusively uses non-restrictive Trusted Platform Module (TPM)-based mechanisms to achieve secure storage, rollback protection, reliable updates, and remote attestation. Our design targets unattended devices like smart gateways or industrial Internet of Things (IoT) nodes, enabling maintainable and owner-controlled deployments.A key contribution is a scalable rollback protection mechanism based on TPM extend-indexes and Enhanced Authorization (EA), which avoids per-device policies and vendor lock-in. Combined with secure storage and remote attestation, our system protects application data against offline access, rollback, and replay attacks.We evaluated our prototype on real hardware, showing moderate performance overheads and strong security properties. We further identify limitations and outline future directions to improve policy management and reduce boot latency in TPM-based platforms.