Comment by deltoidmaximus

This is where the attestation feature comes in, there's a reason it was part of the initial spec and key transfer was a "we'll get to it later". They will use it as a weapon to blacklist providers that don't play by their rules.

https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

https://github.com/keepassxreboot/keepassxc/issues/10406