Maybe I am just a bit naive on the under the hood workings of the play integrity system, but I would imagine most of the devices not passing attestation are just Rooted or 3rd party roms. Those can easily change around keyboxes and mock stuff out (for now at least) to try and pass these checks, would that not also spoof device id making this void? I guess you could also use this to store info on devices that are not spoofing stuff, like device level bans for a game or something. Maybe that's more the use case here rather than the continued war against enthusiasts.

> You may not use device recall to fingerprint or track individual users or devices

Pinky promise?