What sort of regulation do we imagine a government putting into place to stop this? If anything, governments tend to lean in favor of identification and verification systems because they make corporate commerce run more smoothly.
It's not hard to imagine legislation around a user right to ownership of their device. For example, it could be made illegal for a website to attest that a user is not running specific software.
Legislation around device ownership rights are already present, especially in the EU.
