Connected assets
Name the device before you pay it.
If the identity can be copied onto a second machine, the proof of coverage, location or output can be copied with it.
What counts
A key that is difficult to extract is a start. An attestation from the hardware vendor is a claim about that start. Neither proves a customer used the service. Helium's coverage proof is the cautionary reading: radios can witness each other without carrying paid traffic.