BTW, I noticed a few odd things on the Pixel 3. The vendorPatchLevel/bootPatchLevel fields in key attestation use a YYYYMM format instead of the documented YYYYMMDD. The vendor image also didn't have ro.vendor.build.security_patch increased in the update.
Conversation
Replying to
I'm unsure why rollbackResistant was replaced with rollbackResistance in key attestation v3, but unless I'm missing something obvious the Pixel 3 doesn't appear to set either the old v2 tag or the new v3 tag even though the keys are still rollback resistant.