And the owners of the computer can't get the key in the secure enclave? Are they part of the threat model?

“Some person with physical access to the computer” absolutely is part of the threat model.

Some person, yes. The owner, no.

[deleted]

The standard way you distinguish "adversary with physical possession" from "owner" is "do they have the owner's passphrase".

[deleted]