First, don't destroy your opsec if you feel unsafe. Open source can move forward with contributions from people who can safely contribute.

I would, however, consider sharing enough of the solution somewhere that others can find it. It can wait to join the official answer list until someone else verifies and contributes it - someone who faces less risks for doing so.

Also, as others have mentioned, the real long term answer is to reject banking apps. They're simply do invasive, and the web portals aren't going away until there aren't any more PC users.

What about just logging in with your web browser? I've been using GOS for going on 4 years now and haven't had any issues with it. Is there anything specific the app provides that you need that isn't available through browser?

You’re overthinking it.

Post whatever you found and just don’t use the banking app.

Sorry for derailing... But what was the workaround? Was the issue they used Play Integrity API and you managed to circumvent it?