GrapheneOS passes strong Play Integrity without Google's approval

GrapheneOS now reaches MEETS_STRONG_INTEGRITY in the Play Integrity API on supported Pixel devices: after installing, users relock the bootloader with their own key, keeping the Titan M2 hardware trust chain valid. Banking apps increasingly rely on the signed API verdict instead of their own root and bootloader checks.

• Play Integrity API replaced SafetyNet and returns BASIC, DEVICE and STRONG levels
• Attestation relies on the security chip's key, not the OS build
• GrapheneOS reaches STRONG on Pixel when the bootloader is relocked
• Banks are moving to the API verdict instead of their own blocklists