> Attestation doesn't mean you can't run software you want on your own phone,

I couldn't run my bank's app on an up to date and security patched lineageOS ROM Thanks to safetynet, even trying the hack around approaches.

They'd happily accept the out of date, CVE riddled official ROM however as it had the "popes blessing" from Google.