As an example of the excess here:

Marriott (the hotel brand) shipped a release of their Android app that refused to run on unlocked devices.

It probably didn't impact the majority of (locked) Android devices, so why would Marriott care?

And with one app update, a valid user configuration became less capable.

When this remote attestation business started, people tried to minimize its impact by saying only apps that really needed it would use it. Such an absurd argument. Everyone is going to use this technology. It will literally become the default.

Everyone loves cryptography and wants it working in their favor. Everyone. It's great for us when it protects our messages and browsing from surveillance capitalism and warrantless government espionage. It's extremely bad for us when it becomes the policy enforcement tool of corporations and governments.

Remote attestation means we either we run the software which does their bidding and protects their interests and bottom line or we don't participate in society or the economy. Only way it could get worse is if the government starts signing software as well. One day even the goddamn ISPs will refuse to link to our hardware if it fails attestation.

It's literally the end of free computing as we know it. Everything the word "hacker" ever stood for, it's over.

Meh. I didn't reflash my phone. I didn't root it. I didn't do anything to modify its system files whatsoever.

I just installed KDE Connect, and an open source keyboard. Banking apps refuse to run because of those (because my keyboard might see my keystrokes!!!). They don't even need a failed hardware attestation to refuse you service.

So even if you don't try to modify your device, your device might still end up like half a paperweight. I either can't do banking, or I can't use the functionality I want.

They do need the hardware attestation to prevent you from lying to them about what keyboard you use.