Although it's definitely not looking rosy: https://httptoolkit.com/blog/apple-private-access-tokens-attestation/