The scariest part is that it's not just the browser --- remote attestation goes right down to the hardware with things like the TPM, so if even one piece of your software is not "approved", you'll be locked out.