The disk isn’t client owned, but anyone can run modelwrap on any device and reproduce the root measurement that is being attested against.