Attestation only detects user-initiated "compromises" like unlocking the bootloader and flashing a custom ROM. It does not detect exploitation.