[mschuster91]

There is a fix for SafetyNet - it forces the client-side library to assume that there is no hardware co-processor.

[grishka]

It's bound to break in the future. Google will stop, if didn't already, certifying devices that lack the TEE.

The issue I'm pointing out is that this device integrity thing exists at all, and that Google ends up having more control over the device and its capabilities than its legitimate owner.