[throawayonthe]

whether a device is rooted kinda does matter from this pov as it undoes a lot of the security assumptions on android...

however grapheneos isn't rooted anyway

[hparadiz]

We're talking about just in time tokens that disappear after use. There's nothing you can do to defeat that on a rooted device. That's the whole point of the entire tech. That's why yubikeys are even a thing.