The nice thing about hardware attestation is that the app might be compromised, but only for a few versions. That's enough to pop your private key stored on dis

The nice thing about hardware attestation is that the app might be compromised, but only for a few versions. That's enough to pop your private key stored on disc, and to impersonate you for a short while, but then control is returned to you. You might not even notice, if it's detected by the apps security managers at all. On the flip side, the most common form of a compromise is going to be untrustworthy apps, because for some reason people still use WhatsApp