> If attestation isn't triggered then prior behaviour will happen

That’s up to the web server to decide, it could just block you instead, and there is incentive to do exactly that.

> attestation isn't to prove you're using an approved device

That’s what it is doing though, so it can and will be used for that.