That’s up to the web server to decide, it could just block you instead, and there is incentive to do exactly that.
> attestation isn't to prove you're using an approved device
That’s what it is doing though, so it can and will be used for that.