App Attest and Play Integrity won't catch a real phone behind a proxy

Integrity checks prove the app and device are genuine. They don't tell you what network the request came from. Here's how to cover both, with Swift and Kotlin code.