Keys sealed in hardware from the factory. SafetyNet already does this on Android from boot up to apps (that use it, which includes shit like McDonalds...). This would extend it potentially up until a website itself.
Really powerful and useful if you need strong integrity. Really really painful if you want full(er) control over your device.