Mostly the government forces them to do this. If the capability did not exist it wouldn't be mandated or used. Think about this whenever someone tells you "just don't use it if you don't like it", about everything.
EU has PSD2 which enforce good, strong rules on customer authentication. For example, banks must have two-factor authentication. And if both factors live on the same phone, the bank has to safeguard against that phone being compromised. Hence the root detection and app-integrity checks that he is complaining about.
But what's tragic is that instead of understanding the problem, which is partly driven by regulation and mostly not even a problem, he calls for more government regulation. What a mess.
There is something really tragic here.
EU has PSD2 which enforce good, strong rules on customer authentication. For example, banks must have two-factor authentication. And if both factors live on the same phone, the bank has to safeguard against that phone being compromised. Hence the root detection and app-integrity checks that he is complaining about.
But what's tragic is that instead of understanding the problem, which is partly driven by regulation and mostly not even a problem, he calls for more government regulation. What a mess.