this doesn't work on stolen aws accounts though /s
You can proxy all the underlying USB communications to a physical device. Allowing attestation in the spec was not an anti-bot measure.