> Out of curiosity, is there anything stopping websites from detecting if a browser has WEI and then simply not serving the website?
Of course, just check for the existence of the attestation API described by the spec.
> Is there any reason at all that websites can't do this?
Because it would be an extremely dumb move regarding reach. Banning WEI-enabled user agents means you're banning over 80% of your traffic. This might be okay for a small blog or if the website owner is big into activism, but if you have a commercial interest you absolutely can't do this. Plus, blocking WEI-enabled user agents only hurts the user in the end; Google won't walk back on such an aggressively-pushed feature simply because some site refuses to serve Chrome users.