Custom ROMs/patches can be made hide that the phone is unlocked and fake that it passes SafetyNet, even if you use official Play Services it's just ridiculous it's something that needs to be done in the first place.