Comment by grapheneos

Apps rarely use hardware key attestation directly but rather use it via the Play Integrity API. Play Integrity device and strong integrity levels ban using a non-Google-certified OS. Play Integrity uses hardware key attestation for both integrity levels and it's a hard requirement for strong integrity. Developers enforcing one of those integrity levels to use their service need to either stop doing it or add explicit support for non-Google-certified operating systems via key attestation. Roblox's documentation shows they're taking the latter approach.