How can they verify it now with hardware-based security? They can't, that's why WEI is proposed, to bridge device attestation API. While trivial fingerprinting

How can they verify it now with hardware-based security? They can't, that's why WEI is proposed, to bridge device attestation API. While trivial fingerprinting methods can be bypassed, TEE-based methods are pretty much impossible to bypass ($500K reward for that)