Why do you think it makes sense for a company using sockpuppet accounts to promote themselves and attack GrapheneOS to be in charge of which devices and operating systems people are allowed to use?
The two other companies they've named as being involved in it have been attacking the GrapheneOS project with fabrications for years.
Why not simply use the standard Android hardware attestation API rather than an API layered on top of it which exists to put them in control of it?
