I think a personal attestation really isn't much of a control. There is always a personal attestation. If you look even at a normal program where there are lots of checks and balances to vet eligibility, an individual has to make an attestation.
What was missing was asking for the documentation and the proof. That's what I referred to earlier about that international best practice. In times of an emergency, you don't expect individuals to do all of that, but you expect them to have it all available so that, when you come in post-payment to verify eligibility, they'll have all that documentation and information and be able to demonstrate and prove their eligibility, versus just making a personal attestation at the beginning.