Comment by nextaccountic

The actual end has all cryptographic keys used for remote attestation released to the public

Open source software will not embed them, but maybe ask you to download yourself