You can't sign a rental contract because eIDAS requires "mobile device security validation systems" and that's the only remaining way to sign documents, and once again the server uses attestation.

The server can be OSS, the app can be OSS, this kind of system could even use open protocols (e.g. OIDC) but because it requires remote attestation it is cryptographically impossible to use and participate in society with on any device that you, the owner, have the keys to.

This must be stopped.

You can't view social media posts because your mandatory eID app for age verification attests your OS image against an allowlist of certs the govt controls, a gate that you can't ever pass. You can't text your friends because WhatsApp requires SafetyNet to "keep bots out". You can't call your doctor because SIM cards don't exist anymore and the eSIM app won't work if you unlock the bootloader, and attests that server-side before unlocking the eSIM.

There is a real chance that in 5-10 years, there will be laptops and smartphones running open processors and operating systems with UX and and an OS comparable or better than the proprietary equivalent, but which are effectively useless to the average consumer because it is cryptographically impossible to use them for anything due to remote attestation proliferating more and more

@nprofile1q... It's so well written it even got my nonexistant attention span to respawn