I 100% agree with this. But even if holdouts could magically prevent the abuse of this API there is still a massive issue. Once this standard gets wider adoptio

I 100% agree with this. But even if holdouts could magically prevent the abuse of this API there is still a massive issue. Once this standard gets wider adoption and it's time to boil the frog further literally all it takes to disable holdouts is editing a single value in the attester code. They will justify it by saying holdouts are no longer needed because 98% of clients are already compliant.