They do accept third party clients. They don't like it, but they don't have a choice, because they don't use device attestation.