Lying about it may become impossible in the future when you throw hardware key attestation into the mix.

https://developer.android.com/privacy-and-security/security-...

FIDO authenticator attestation is dead for consumer-facing RPs. Apple made the right call and simply refuses to support it outside of MDM environments.