If Apple launches an attestation API that has key material that they control on the hardware co-processor that it authenticates with Apple servers and passes the result back to the game server, then there's no mechanism to intercept it.