Sure, I see where you're coming from, and much corporate software has traditionally worked in this quasi-consensual hostile-default kind of way. But the specific terms used in that passage are highly indicative of this being intended as implementation of remote attestation for the web.
Furthermore, even if the "key facts" it reports don't initially include results of hardware remote attestation, it's entirely foreseeable that over time these will be added.