Heh, makes me laugh. just recently I was trying to get play protect 'certification' in a virtual machine took a bit of haggling and legitimately obtained samsung software to bypass it (and a 3 day gpt-5.5 /loop).

Google has proven time and time again that they don't want to make this technology fool proof and I severely doubt this will be any different.

Although I do agree that hardware attestation as a captcha is pure bullshit no matter the context.