I’m just not convinced that mandatory hardware attestation is actually a real problem we need to worry about.

Like, yes, people with high security jobs will have that for sure. And they should.

But large companies that want customers? They want to make it as easy as possible for their customers to connect. They’re not going to force people to have a hardware device which if damaged or lost will lose them a customer. That’s just not what they want.