I expect a gray/black market in TPM keys and the like will grow if this takes off, but hopefully the citizens will fight it very strongly before then...
...but then again, this is the EU, not the US.
Hardware attestation literally prevents that. That's why it's mandated.
More precisely tries to prevent, but there have been occasional articles about breaking TPMs here; and I suspect once they become a major obvious barrier to freedom, we're going to see a lot more attacks on them, and more successful ones too.