[tpm2] Re: How can I prevent MITM attacks for unsealing?

Here is the command I tested:
https://gist.github.com/jclab-joseph/d1d6d9bbbd32c0fe200cc7725bcf0d86
A session was established via a serialized persistent handle.
This seems to be able to prevent MITM by default.

But wouldn't it still be vulnerable if an attacker could replace primary.handle?
Is there a way to validate between session and seal.ctx or seal.pub?