https://digital-strategy.ec.europa.eu/en/policies/eu-age-ver...
I really don't like this perfect law enforcement future, but this EU initiative is about the best design one can have.
There are no plans to allow separate, standard AOSP attestation methods for Android. Google's crooked* Play Integrity will be the only one.
*crooked because it confirms Android 8 are safe and with full integrity, even when they're rooted, full of malware and present spoofed certificate.
The user of Play Integrity can choose to just block Android 8.