The gap
To prevent unauthorized data access, you can add failsafe mechanisms to your hardware to wipe sensitive data upon detecting tampering. However, if you want to prevent unauthorized use of the chips themselves (say, to prevent unmonitored, dangerous AI workloads), you need a tamper response mechanism to make physical modification of the chips prohibitively costly.