If it's a government app, you can pressure the government in many more way than you can let's say a bank - and FSF has experience in that kind of pressure. I hope their technical initiative also comes with a parallel legal/policy initiative that tries to get governments to stop using things like attestation.
You can't boycott a bank, they all do the same shit and you need to have one.
With a government, however, you can go through your MPs, use administrative procedures to lodge complaints, etc. They also don't have Visa/Mastercard forcing them into attestation, it's usually just because the contractor thought it made things More Secure™.
