It’s interesting to think about from a technological point of view, and there could be multiple ingress points to combat it.

The proposal doesn’t have a complete implementation, but it in essence they want websites to ask browsers for a key if sorts (attestation). In theory this flow would be a lot like hoe notifications work. Keeping that in mind, when the website asks the browser, what’s stopping us from making our own attestation server?