3rd party AV sdks? This reeks of snake oil. They should just stop treating the device as a hardware security anchor.
And how is it still ok that most android phones in the wild do not get security upgrades, let alone timely ones?
The tricky part IMHO is that with safetynet google is selling snake oil themselves. If they are claiming that security does not count as fair use to spy on the userfor others, ... .As much as I like security awareness. In the end it means patronizing users in order to control the ecosystem. The problem with banking and google is that we cannot escape this ecosystem without losing a lot of commodity. Why not do it like Apple and put annoying popups before each install process if apps want spying permissions. The only reason can be that google wants us to not be aware...