Interesting, so it seems like the WebView that android uses could make a difference. I wonder if all of us on custom ROMs that use alternative webviews will avoid this nastiness if it does make it to stock android.
The danger is the same as WEI or Play Integrity. Apps may refuse to work if the attestation fails. What do they gain from it? I don't know. But what is the purpose of banking apps checking if the device is rooted or not? They work without it on laptops.
Ok, that makes sense. Well I guess that doesn't worry me to much (aside from the quicksand of DRM type stuff that it implies). I've had zero issues with play integrity because thankfully I don't have to rely on any services that won't function on a privacy respecting ROM. Hopefully that principle will hold true with websites as well.
The exception is of course YouTube, I have yet to find a video sharing site that has the variety of content that YouTube does. Maybe this will be the final straw that pushes me off it, like Reddit's garbage from a few months back pushed me to Lemmy.
Hopefully that principle will hold true with websites as well.
The main issue that I have had is that the web experience for many banking apps is really really bad. Many of them are non-responsive designs aimed only for desktops. Even worse, some features are available only on their mobile apps - like chat support. Honestly, I don't understand why banks do Google and Apple favors like this.
Yeah it's really frustrating. I haven't actually experienced it myself, BOA, Amex, Doscover and Chase apps all seem to work just as expected on both CalyxOS and GrapheneOS from my usage. Maybe we'll just need to start taking our business to the banks that allow more freedom in their app availability