No, there is hardware based attestation, and it could be set by an administrator / parent for the user account.