The EU lets them get away with requiring device attestation for their mobile apps. It's not exactly the same thing since system requirements for native apps are traditionally narrower than websites, but it's similar.