Sorry, but this is nonsense. People mostly use apps to use services. These services will just start to require remote attestation when people try to use them directly from their own apps (see e.g. how Volkswagen shut out Home Assistant, etc.).

This would only work for the small subset of apps that are mostly local (a timer, maybe a weather app if you can arrange API access, etc.).

Also, 99% of the population cannot code their own app or are not interested to do so. (Even with an LLM.)