See, usually when I run into claims about rooted Android being less secure, I point out that they have no problem with regular laptops that the user has root/admin on, but in this case I suspect they try to DRM control of that, too...

GrapheneOS is not rooted though. Are all of them doing SafetyNet checks too, not just root checks?

Which is funny because rooted android users can easily make any app believe it isn't rooted. Had to do that recently with the French identity app.