Magisk can hide root from apps, but I don't know how effective it is against all possible methods an app might have of detecting root. I'm not sure if detecting an unlocked bootloader is treated in the same way or not - I haven't run into that one as a problem so far.

I refuse to use my phone for banking due to trust issues in putting all my eggs into such a stealable, forgettable-in-a-taxi, and heavily monitored device basket.