This doesn't match my experience. Banking apps in Germany often required screwing around with additional Magisk modules, and would often break again after an update. Just not worth the effort.
> The only apps that require a bit more work / expertise are apps that require integrity checks (ie. google wallet).
"A bit more work" but only for now... There is a loophole (spoofing the device fingerprint with the one of an old model where non-hardware attestation is still accepted) but Google is starting to ban those models and it's only a matter of time until they're all banned.
Most apps I use (ie. banking) are bypassed simply by adding them to a hide-list.
The only apps that require a bit more work / expertise are apps that require integrity checks (ie. google wallet).