It does not say anything about remote attestation, only rooted/unlocked phones. Most likely it works fine if you run GrapheneOS with a locked bootloader.

Many European banking apps work on degoogled Android like GrapheneOS or /e/OS fine, as long as you have locked the bootloader and USB debugging disabled.