Turns out that Web Environment Integrity proposal everybody is getting angry about (imo very legitimately) was effectively already shipped by Apple in Safari last year: https://httptoolkit.com/blog/apple-private-access-tokens-attestation/
That means if Chromium ships it too, we could quickly move to 90%+ of browser traffic being attested. Not good!