Seems HN changed the link. the developer of the extension explains it on the home assistant forum. They are using firebase app check which uses remote attestation.