If they have legal requirements for attestation, they also have the option to properly attest Graphene.

Yep. Not sure all of them are attesting GrapheneOS, but there's at least 5 banks officially supporting it.

https://github.com/PrivSec-dev/banking-apps-compat-report/is...