And their apps refuse to run on custom ROMs or an unlocked bootloader.

Banks are the one thing that should use apps. Browsers have too many security issues.

The bigger issue is them using the google integrity bullshit, that's not necessary.

Until web standard can agree to have device bound session, it won't happen. Cookie stealer malware is just too dangerous to perform financial transaction. So maybe for read only stuff it is fine