Owners and users are different people in the case of enterprise issued devices, which is a very common use cases for things like this. In that case the user is

Owners and users are different people in the case of enterprise issued devices, which is a very common use cases for things like this. In that case the user isn't trusted, not because of maliciousness, but because of security mistakes, which are quite easy to make. Having attestation to prove the device is not tampered with before letting it connect to the company network is a good idea.