But in this case, the slipping just happened. This thread is about how an app that will be required for using a vast fraction of all websites will require hardware attestation and likely only run on closed, non-rooted mobile OSes. That's not a hypothetical scenario, it's literally what this thread is about.