Neither seems trustworthy. Google because, I mean,
Google, they’ve repeatedly demonstrated that they can’t be trusted, whether regarding privacy or LTS, and Apple because it’s just “trust the device”, which can obviously be gamed by developer accounts or other hacks like simply walking past a rack of devices confirming touch or face recognition.
There’s no stopping fraudulent behaviour, only defensive barriers to dissuade the non-nation-state actors.