Dont take the fact that Wero still works for Bunq as an indicator that ASN or any other bank are doing something especially untowards.
Given Bunq's abysmal security track record it probably means they just forgot to enforce some policy that Wero requires on mobile devices - no matter how annoying these "no grapheneOS" policies are in general, of course.
I can't take bunq seriously because every time I approve a direct debit I keep seeing two transactions in the log -- one already processed and another still pending and also asking me to enter the pin again after it was approved.
Peak clown computing.
Yeah for now I use bunq + CurvePay for tap to pay (since Google Pay also doesn't work on Graphene).
Let's see how long they let me keep it.