The documentation clearly outlines that there are multiple signals being analysed. Relying on play integrity alone is definitely not sufficient as you state.

Okay, I meant that Google issuing a "pass" is worthless, yet it's being used as a mandatory signal.