If this is similar to LineageOS, then it's always potentially only a matter of time until some banking and payment apps stop working due to failing security attestation pushed by a Google update.

We need native apps that pass attestation out of the box for that phone/OS, not relying on hacks that may or may not work in the future.

This is not good UX and it poisons the well if you push users to a new platform then they discover some apps don't work as you promised.

▲

femto 10 hours ago | parent [-]

Beats me why banks can't use a FIDO2 enabled web site.

	▲	joe_mamba 7 hours ago \| parent [-]
		Banks used to give us those RSA tokens in the past for securely logging in to the web UI, but then discovered they can cut down on cost since everyone has two brands of smartphones.