Its great that GOS has announced why standard Android hardware attestation is better for security.
In theory, tech companies would use the more secure method instead of imposing big tech screening upon their users.
In practice, the apps that matter (banking apps, financial services, travel, social media) have more important stakeholders than just technical stakeholders.
These are publicly traded companies that abide by the direction of their board and the major stakeholders, which typically include the biggest financial firms in the world. Blackrock, Vanguard, State Street.
If the international trend is that apps must require Google attestation, then major apps will follow as the result of investor control. And this trend is starting to show if it isn't obvious already.
Age verification is already mandatory in the UK, will be enforced in Australia by the end of year. Digital ID is now mandatory in many countries like China, Mexico, Vietnam, and Pakistan. In more "democratic" countries, the infrastructure for Digital ID is already in place and is building adoption.
Digital ID laws also create requirements for things like opening a bank account, paying bills, or getting a SIM card.
Its time to get real, as the time horizon is quickly approaching where the most "important" apps won't be usable by those who care about privacy, resulting in a fracturing of the tech space.
If we accomodate and comply with attestation, we'll be caught unprepared and be forced to pick up a big tech phone once again. Digital ID enrollment won't be far behind, and thus it will be for us, our children, and our children's children.
OR we can build actual solutions for decentralized finance, travel, and social media that will offer people freedom and privacy.
We have about a few years to do this. Let's build something better.