Earlier quoted context omitted.
None of the unofficial Android builds allows me to access to the secure element in my SIM card to use my e-signature, which works with SIM menu prompts triggered OTA by the application I'm currently using, mostly governmental services. If I'm on a custom ROM, the notification never pops up.
You have to have evidence that this is because of attestation, though - lots of open source software is missing lots of features because they are just missing features.
It's like Trusted HDCP pipeline. Every part has to be signed properly, and no open distribution of Android can do that, period.