(Android) Key Attestation Leak

The context for this link is that people have been finding ways around Play Integrity, which uses a keybox/hardware backed security key to do things like use banking apps, use the McDonald's app, Google Wallet, etc. on custom roms.

Every time a key gets revoked, a new key is found by someone else to share around the community so people can continue to use daily services while retaining control and choice over the OS on their phone hardware.

It seems that Google does not listen to its users about Android on anything except their own forums/bug trackers, so I would encourage any of you that use unlocked bootloaders or custom roms (with or without locked bootloaders) alongside with Play Integrity to provide your perspective on this thread.

From my perspective, Google should not restrict the choice of OS on its users by hindering its use through Play Integrity. You can't even book a hotel at Marriott if it does not pass Strong integrity. Furthermore, abandoning older devices after 3 years is fine, but they should not then restrict features of the device if I decide to use an up to date OS and security patch via custom ROM which is more secure than old android OS versions. In effect, what this does is push users to buy new hardware that they don't need through planned obsolescence. Instead of providing the best experience possible, they are trying to funnel money to new hardware purchases and there is a misaligned incentive going on. Bootloader unlocking should not have anything to do with Play Integrity, just like how on your computers you have root without your banking services refusing to serve you.

Do you think it's fair for a company to tell you what OS you can or cannot use when they stop supporting it with updates after 3 years (for older devices)? What about linking bootloader unlock status with Play Integrity by default when no system modifications have been made?

I have posted my view in the bugtracker linked and I encourage the rest of y'all to as well.