How about Play Integrity and Key attestation results? What are the results of test apps (e.g. SPIC - com.henrikherzig.playintegritychecker and io.github.vvb2060.keyattestation) in your setup? I feel like more and more big apps rely on these security features.