Indeed. It also fights symptoms rather than the underlying issue - that Google Play Integrity is an anti-competitive method that Google uses to shut out competition. The fact that Google-certified phones that are months behind on critical security updates (or even have malware in there updates as a recent case) do get a pass, shows that it is not really about security, but about destroying competition in the smartphone ecosystem as early as possible.

The solution is not voting with your wallet, but either leveraging the DMA or drafting new laws that counter this.

Either Google should be forced to approve secure alternatives like GrapheneOS or companies should be required to also implement AOSP attestation. Or alternatively, remote attestation should be banned completely, but I can understand the argument that it serves some legitimate uses.