So I'm guessing you're using no sites hosted on Cloudflare or Fastly? They already use exactly this kind of remote attestation technology for traffic from Safari.