Apple urges developers to not use DeviceCheck for anything beyond basic device verification, and if you’re a developer that’s also misusing it, then you should definitely cease that—there are probably more reliable ways to check whether it’s the same user trying to access an account from a device or not.
I don’t think I care about not being able to erase the device ID. It seems useful to have this, actually, for back-tracing if need be.
Snapchat probs shouldn’t use the DeviceCheck services improperly. But hey, that’s just like my opinion, man.