Rate limiting access to the enclave? Somewhat related, I fear this is where we are going to end up with secure attestation, limiting web access to approved devices.
Pegging the rate limiter to 100% on an old iphone is also going still give you a lot of tokens very cheaply.
Most of serious implementations have their own clocks or incremented counters, which makes tricking them very hard even for a state actor.