SafetyNet doesn't protect me from having my personally identifiable browsing data sucked away and sold off, and that happens daily to all users of their devices. Google can't even sanitize their own ad platforms.

What are you attempting to protect me from then SafetyNet? Oooh, I get it, you're trying to protect apps created by companies that collect and store sensitive data to minimise the chances of said companies being sued for, and having to publicise, a data breach. Ok, why didn't you just say that? Yeah, you're right, it doesn't play anywhere near as well to the great unwashed.

SafetyNet sounds like shit to me:

> requires Google Play Services to be enabled on the device for the API to function smoothly.

> SafetyNet works in combination with the snet service on Android devices which collects data about the integrity of the device and constantly ping Google about the safety status of the device.

> Google offers many other options like application sandboxing, encryption, app-based permissions and so on to secularize apps but none of them are considered as an all-inclusive solution.

(GPS permissions required for wifi scanning? Fix your basic shit first!)

> By identifying devices which are currently in the non-tampered state the API provides an assurance that the device on which the app is running is neither rooted nor using a custom ROM.

(cough Magisk cough)

Above excerpted from an article admittedly with rose-coloured glasses view of the subject: https://www.hexnode.com/blogs/safetynet-android-security/