The scary part isn’t what happens with attestation on todays web, it’s what kind of web gets built tomorrow when the vast majority of users support attestation. The author of WEI acknowledges this risk but the only mitigation is a suggestion that maybe browsers can occasionally hold off on attesting - basically, letting market share of attestation hold just shy of 100% in hopes that it doesn’t dominate the web. I’m s…
until sites "find a way" to ask multiple times for attestation (if it has a 10% chance of failing on each request and 10 of them in a row fail, what's chance of the client supporting WEI and randomly holding off on all of them?)
"find a way" because it won't be hard.