EU has PSD2 which enforce good, strong rules on customer authentication. For example, banks must have two-factor authentication. And if both factors live on the same phone, the bank has to safeguard against that phone being compromised. Hence the root detection and app-integrity checks that he is complaining about.

But what's tragic is that instead of understanding the problem, which is partly driven by regulation and partly not even a problem, is that he calls for more government regulation. What a mess.