In order for a machine to be running Secure Mode (hardware attestation), it requires Apple-signed stuff Secure Enclave. This current implementation shows as "Self-attested (software)" and Confidential tier is "Best-effort — fast, but the operator can read prompts". Both are not ideal.
cocore.dev
Secure Mode & Confidential · co/core
How co/core's two orthogonal provider guarantees work: Secure Mode (hardware attestation) and the Confidential tier (operator-blind inference).