I'm planning to test (but I hate reinstalling) https://github.com/topjohnwu/Magisk for safetynet whatnot.

But lack of kernel updates is pita and absolutely true :(