The EU Digital Waller requires hardware attestation so only locked-down government-approved OSes work