Do you really think this will stop there? Websites need to contact an attestation server and the EU can just ban verification for any website they don't like.