You can proxy all the underlying USB communications to a physical device. Allowing attestation in the spec was not an anti-bot measure.