Ban attestation methods that owners can't control.
If a company wants control over devices they own, that's still fine.
Ban attestation methods that owners can't control.