This doesn't match my experience. Banking apps in Germany often required screwing around with additional Magisk modules, and would often break again after an update. Just not worth the effort.

> The only apps that require a bit more work / expertise are apps that require integrity checks (ie. google wallet).

"A bit more work" but only for now... There is a loophole (spoofing the device fingerprint with the one of an old model where non-hardware attestation is still accepted) but Google is starting to ban those models and it's only a matter of time until they're all banned.