Hard when those sites are things like your bank, your government official stuff pages, etc.

This attestation stuff is a "not such a bad idea in its basic principle" thing that will actually absolutely get abused everywhere in every way including being used to kill off browser competitors, enhance monopoly positions, etc.

It needs to be stopped now.