There are workarounds:
Install magisk, add the app to the zygisk denylist before first run.
Install ~~universal safetynet fix and magisk hide props config (modules for magisk).~~
For some apps, you may have to install them in island so that they can't detect the magisk app.
Thanks. I have a pretty old install so my module list is a relic of the time but it makes sense why it still works for me. I'll edit.