But that's different: if your bank is stupid (most banks are, let's be honest), it's not the fault of Android. Sure, remote attestation allows your bank to do

But that's different: if your bank is stupid (most banks are, let's be honest), it's not the fault of Android. Sure, remote attestation allows your bank to do it, but at the end of the day, it's your bank that pulls the trigger, not Google.