the operative word here is "just"

As someone who has hid root from banking apps in the past, there is no just here. You need to keep up with release notes of software updates in several components (custom OS, magisk and any roothide mods you use). That's fun to do for a while, but not long term. And definitely something I wouldn't expect from the mythical average user.

I agree, but the average user doesn't generally root his android phone. If you have the technical abilities/motivation to root your phone, you may have the ability to use MagiskHide and manage an exclusion list in Magisk.

I agree, it's not for the average user. I'm happy to root my android (mostly because android backups really suck otherwise) but would definitely not recommend it to most people. I think it took me an average of 2 hours every 6 months to keep hiding root correctly.

> you just have to hide root from the app

No longer going to be possible due to hardware remote attestation.