It's not really bricking as the devices still work and remain as secure as they were before for the user specific keys, they simply fail attestation for cases w

It's not really bricking as the devices still work and remain as secure as they were before for the user specific keys, they simply fail attestation for cases where someone cares if the user is using a real and secure device. I.e. Banks/wallet services and cloudflare given their fear of Sybil attacks. Personally, I would rather my banks accept Fido keys and tell me when I might need to replace one. Since the user keys are still fine, they technically only need to prevent the sign up of new keys if they trust information on when a device was compromised. People compromising them for fun and publishing their success is much better than no one being interested in their security and no one knowing whether it is hard or easy to be a secret builder of malicious clone tokens.