In case there's a misunderstanding, GrapheneOS doesn't provide root access, and fooling apps won't be possible as the platform keeps moving towards stronger hardware attestation.

However banks can use the hardware attestation API instead of Play Integrity API to allow alternative distributions like GrapheneOS [1]. All of my financial apps happen to work on GrapheneOS.

[1] https://grapheneos.org/articles/attestation-compatibility-gu...

Thanks, I was confused. I thought you needed to root the phone to install GrapheneOS, but it seems you only need to unlock the bootloader.