On every boot I see the sha hash of the image plus there's the attestation App. I've never seen either before and I used both stock Android and LineageOS. Also every App gets granular permission control and there's an automatic reminder to remove permissions for unused Apps. Classic example of Enterprise thinking on VW's side.