> You can usually still pass safetynet with latest magisk, even on custom Roms.

It's unreliable by definition. You're better off keeping a device around with the stock OS on it, that you only use for SafetyNet-required stuff.

I know there are means to defeat safetynet but honestly I was glad not to tweak my phones anymore and happy without a rooted firmware.

I remember the times of endless tweaking and patching after some Google Play services update a few years ago.