seems like google is playing a part in this ? https://github.com/robinostlund/homeassistant-volkswagencarn...

Yes this is Google helping vendors block access to their APIs by using hardware attestation.

I recently hit the same wall trying to directly my garage door opener's API (MyQ).

I'd be amazed if Google enabling this behavior doesn't violate some EU competition laws.