Does Google Pay work with unlocked bootloader?
Any bank apps that require SafetyNet attestation?
For banking apps there may be a certain level of liability ascribed to the bank. depending on local jurisdiction, but I don't think banks need top of the line security to comply with those regulations; even if there is legislation, security only needs to be good enough so that basic rooted malware can't steal money.
I think the wording in the errors and warnings for broken apps say all. When an app doesn't work because the device is rooted, the messaging is usually "your device does not support X" or "your system does not meet the requirements" or "your device is not secured". It's never "you may have malware" or any other potentially helpful message; the wording always seems to punish the user for daring to modify the software on their phone.
Or maybe they are afraid that people will see that instead of 4k they get 720i scaled to 4k. If they are so afraid of people ripping they could always insert a break in the stream and downgrade the quality, blaming internet connection.
Your experience will depend on the laws of your country and the terms of your bank, but unlocking a bootloader with Magisk and using the right masking tools is all you need to work around most SafetyNet validation.
The trick seems to be to fake the type of attestation available to make the system think hardware attestation (which can't be faked reliably by software) isn't available, falling back to basic software attestation which can be spoofed. Software developers could theoretically detect this bypass by keeping their own mapping of device type to device properties (available hardware etc. to validate the model number and prevent quick spoofing, available attestation to prevent SafetyNet bypasses, and so on) but they'd have to disable some obscure devices or accept the spoofing.