The privacy pass attestor endpoints in the official extension are just prototypes for testing. Not for production usage. And you’ll eg. still get captchas every time from Cloudflare.
You can also use the demo page on an iPhone with PAT enabled and see it not recognized: https://demo-pat.research.cloudflare.com/login