The two dirs created by sfsconfig are world-writable, which might introduce unexepcted and undocumented security concerns.
$ ls -ld /var/lib/tee/qtee_supplicant /var/lib/qtee_supplicant/vendor/tzstorage
drwxr-xrwx 2 root root 4096 Apr 25 16:24 /var/lib/qtee_supplicant/vendor/tzstorage
drwxr-xrwx 2 root root 4096 Apr 25 16:25 /var/lib/tee/qtee_supplicant
The two dirs created by sfsconfig are world-writable, which might introduce unexepcted and undocumented security concerns.