The attestation process is capable of cryptographically checking the device manufacturer etc (although practically I'm unsure as to whether that's really a goo

The attestation process is capable of cryptographically checking the device manufacturer etc (although practically I'm unsure as to whether that's really a good idea or would work well)