As I said earlier, this is functionally impossible because Apple devices don't offer device attestation data.

Then I look forward to them removing the anti-feature and no longer maintaining the naughty client list.