that's a silver lining

the anti-user attestation will at least be full of security holes, and likely won't work at all