[kaba0]

They have a sandbox which can run google’s services. I read plenty of people saying that they could successfully run their banking app without spoofing.

[public_defender]

This is true, but it solves a different (though often related issue).