This just sounds like a bug. Haven’t delved too deep into it technically though.

Anyway flawed implementation doesn’t mean that hardware attestation is a fundamentally useless primitive. Apple Wallet is responsible for millions of transactions a day.