Well, there's a remote, and I'm sure many people will attest to its lack of function, so I suppose it qualifies on both counts?
It does. Their app does a check of the device to see if it looks legitimate, otherwise the APIs lock you out.
That's not what's happening, unless you have a source. They're now only allowing API calls from specific approved integrations like ITTT.
You can look inside the app and see that it's using Firebase for this
Read the link, they are using firebase app check which is remote attestation.
What link? No link that I can find mentions anything about MyQ and remote attestation.
Seems HN changed the link. the developer of the extension explains it on the home assistant forum. They are using firebase app check which uses remote attestation.