I'm this close to visiting my "local" branch for all my banking.
I'm lucky my banking app works (GrapheneOS), as it's now requiring 2FA with the app anytime I login on the browser. Can't use an actually secure form like TOTP. At least they now allow passwords over 8 characters (yes, serious).
My banking app doesn't check for Play Integrity but they do check for root. You can log in with a rooted device but you can't do any transactions or use fingerprint login. I think this is justified. Rooted devices are not secure. They also check for apps that use accessibility services and if they see that you have apps that use accessibility you have to use their slow af face recognition if you want to pay. This is annoying if you legitimately need them for accessibility reasons. They have no problems with GrapheneOS though so that's cool.
This reeks of servitude/wishful thinking mentality. You do realise that vendors have root access, right? So what, when they do it it's secure because of their magical vendor status? Or is it because they hide the implementation details?