only until device attestation does not exist on the web. google has already tried to make it a thing, and the public backlash only caused them to continue development in chrome on android