WEB ENVIRONMENT INTEGRITY VS. PRIVATE ACCESS TOKENS - THEY'RE THE SAME THING!

Summary from the TLDR InfoSec newsletter

Web Environment Integrity (WEI) and Apple's Private Access Tokens (PAT) both use signed browser or device attestations. A site can request proof that a visitor uses a genuine, non-jailbroken iPhone with Safari, then reject Firefox on Linux. WEI can additionally bind an attestation to a specific operation. The two proposals differ mainly in presentation: PAT is framed around fewer CAPTCHAs, while WEI is framed around service-provider verification.