No, there is hardware based attestation, and it could be set by an administrator / parent for the user account.

That doesn't really matter if something like more than 95% of time it's followed. Compared to now where there is nothing.