>The saving grace is that attestations can be forwarded That would require you to have root on a "trusted" device so you can extract the challenge-response th

>The saving grace is that attestations can be forwarded That would require you to have root on a "trusted" device so you can extract the challenge-response that proves you are indeed "trusted". Which is becoming increasingly harder with each iteration.