This is where the attestation feature comes in, there's a reason it was part of the initial spec and key transfer was a "we'll get to it later". They will use it as a weapon to blacklist providers that don't play by their rules.
https://github.com/keepassxreboot/keepassxc/issues/10407#iss...