I seriously wonder if there is any empirical evidence that safetynet and this play protect stuff leads to less incidents. Funny thing is that I am only rooting my phone to actually fake the attestation checks again because I want to run lineage OS with uptodate security patches on my China phone.
Most of those things are primarily CYA for banks and folks working on the OS at the expense of users.