Yeah I'm a bit wary of letting it ever boot up with attestation module disabled right now because:
- The moment that happens, Google Pay notices and saves something in the Google Play Services data that makes it distrust the phone
- Last time to fix that I had to clear Google Play Services data
- Doing so also wiped the device's COVID tracing data (for Canadian COVID Alert app) and I don't want that to happen again for public health reasons
(for next time, any idea how I might selectively clear only the part of GP Services data that matters, without clearing the COVID data?)
(also any idea how to browse for the downloaded OTA and inspect it?)
I've never used Google Pay, so that's not something I can help with.
Sounds like downloading the OTA file and sideloading it is the safest and easiest option.