This makes me worried, because I am pretty sure Google is going to start removing keys based on attestation certificates. I believe that this is much more abou

This makes me worried, because I am pretty sure Google is going to start removing keys based on attestation certificates. I believe that this is much more about rate limiting than about security for the end users.