Nah, it's doing a server side check for the devices TEE keys before letting it launch the models. Something that, at least publicly, can't be bypassed. Even with something like TrickyStore to fake the TEE keys.
Yeah, I should have said with rather than for. They're doing server side verification of the TEE environment using their protected download service from what I can tell.
