The promises by OpenSecret are unreasonable (such as private key management, which can only be true if they hold the keys)
Unfortunately, Apple’s PCC scheme is still way more secure than trusting AWS attestations as they put significantly more effort into supply chain security and preventing access