Remote attestation still requires on working hardware keys, and on working hardware PKI chain, and control of that by "trustworthy" authorities; If a key leaks,

Remote attestation still requires on working hardware keys, and on working hardware PKI chain, and control of that by "trustworthy" authorities; If a key leaks, it needs to be blacklisted fast. And as you've pointed out - "Would be considered a bug". Bugs happen. Bugs happen a lot in crypto, and bugs happen even more in crypto that no-one with a functioning brain could view positively. Decapping and recovering hardware keys is hard and expensive, but not impossible. But more importantly: Remote Attestation should be illegal. My hardware, my keys, my use case. Remote Attestation to control information is deeply unethical and deeply bad for democracy, because the same technology is even more useful for governments to control and censor.