TL;DR
- Efforts like Graphene OS face increasing pressure from apps that refuse to run on non-standard Android.
- The custom ROM project characterizes Google’s approach to device attestation as incomplete and flawed.
- Graphene OS is prepared to take legal action if Google won’t let it pass Play Integrity checks.
I’d still carry my debit card if I used phone, just in case I lose one while out and about. I think I’d be more likely to notice my phone is missing but more likely to lose the phone in the first place.
I’ve never tried it in part because I don’t trust my phone with it’s proprietary software, and I suspect there may be no open source apps to pay with.