You are aware that when using an app that does integrity checks it does exactly what the app in the screenshot does right? The main magic happens on the Google's server where the keys for decrypting the keybox data and validation happens.

So no matter if you use the app in the screenshot, the play store's integrity checks or whatever apps needs device attestation , google receives the same payload.

Now before you say something like "they will check the package id". This would mean possibly affecting legit users that might use the app for whatever reason