That's most likely based on attestation. Which means the OS still have full control over what it does send but the "thing" can attest that what the OS sends is

That's most likely based on attestation. Which means the OS still have full control over what it does send but the "thing" can attest that what the OS sends is valid and not made up.