Comment by gck1

I'm not sure banking firms need any convincing that attestation makes their systems more secure, as it is true. If the only way to interact with the app is via a human interface, that means you can't have scalable fraudulent traffic hitting your services. Without attestation, someone could MITM the app calls, and then automate it away.

Or when you do, you can then link it to specific group of people based on the identifiers you received from the attestation.