in order to login on the bank webapp, a token must be generated on a dedicated smartphone with all the google spyware installed, and the app that generates the token refuses to run if the bootloader is unlocked, or if the device is not “certified” by google