One specific example: device attestation and Web Environment Integrity, combined with the internet being increasingly controlled or mediated by a handful of middlemen who would absolutely love to turn this on (Cloudflare, Apple, Google, etc) but if they do it too early there’ll be revolt.

It’s had a couple attempts that got shot down so far, but the pushback gets weaker as time goes on, and as the troublesome/less-compliant generations age out and get replaced by generations who’ve grown up accepting this stuff as the water they swim in.