True, but beside the point.

GP claims the API can detect the official chrome browser, and the official chrome browser runs fine without attestation.