I haven't looked in a while, but last time I checked, Magisk had a SafetyNet bypass. It's a cat and mouse game of course, but when I was using it, Magisk stayed ahead of Google 90%+ of the time.