I can also recommend CalyxOS. Locked bootloaders, open source emulation of all Google’s play services (meaning an open source binary running on your phone, filtering requests to Google’s servers with absolutely minimal/random info).

Basically I have anonymized access to the play store, and any apps I install other than Google pay work, no issue. ~~I believe even Google’s secure features work. There’s a reddit post about MitID: https://www.reddit.com/r/CalyxOS/comments/w2ordg/a_proven_way_to_use_calyxos_and_banking_apps_etc/~~

E: having read through the technical comments on graphene’s forums, looks like play integrity prevents MitID from running. The service offers free code generators which hang on your keys though.

Who would’ve guessed skynet was purposefully created by the wealthy back when T2 came out amongst us general public?

I was like, “oh that’s so eerie” as a youngster. The truth behind this path has, unfortunately, been both more embarrassing and savage.