Banks are all moving to MFA through an app, which then needs play protect, which then maybe need TWRP/Magisk.