Apple
The Mac Mini is the hardware foundation. macOS provides FileVault, Keychain, Time Machine and Developer ID signatures.
What it is
Apple supplies the machine, the OS and the cryptographic chain of trust. PrivateCore runs natively on Apple Silicon, without a VM or compatibility layer.
Why this choice
Apple Silicon delivers the best performance/watt on the market. Apple's controlled supply chain limits the risk of hardware backdoors. The Secure Enclave protects keys at the silicon level.