- EU digital identity wallets rely on Google Play Integrity API and Apple's Managed Device Attestation, creating dependence on private companies.
- Google Play Integrity API reinforces Google's ecosystem control, excludes unlicensed Android versions, and violates the Digital Market Act (DMA).
- Hardware Attestation API is an open alternative but ignored, while government adoption of Play Integrity contradicts digital sovereignty goals.
- Inconsistent implementation across EU countries (e.g., Italy enforces it, Switzerland avoids it) undermines interoperability and public accountability.
- Citizens and developers are urged to advocate for open, hardware-based attestation to ensure wallets remain public infrastructure free from vendor lock-in.