> We have to use some kind of attestation mechanism per the eIDAS implementing acts.

Translates to:

"We have to make sure citized accessing the public service have not control over the device per the eIDAS implementing acts"