> On a device rooted using Magisk, the MagiskHide masking feature successfully bypasses the apps' root checks in my experience.

Sure, the protection currently isn't bulletproof. But wait until it becomes mandatory for TrustZone to participate in the attestation.

You're right that more advanced forms of hardware attestation would defeat the masking if Google eventually implements them.

I'm hoping that Microsoft's support for Android apps and integration with Amazon Appstore in Windows 11 will hedge against Google's SafetyNet enforcement by making an alternative Android ecosystem (with fewer Google dependencies) more viable. Apps that require SafetyNet would most likely not work on Windows 11.

> I have used over 10 banking apps on an Android phone with an unlocked bootloader without ever encountering any issues.

You have 10 accounts at different banks? I thought I was bad with 4

Well, this also includes credit cards. In some countries, unused and barely used credit lines improve one's credit score.

Ah yea, I forgot about unused credit lines. I used to close those until I checked my credit one day after closing on of the older ones.