How is a pixel with grapheneos not a secure device?
Ps no it's not rooted but it won't pass full play integrity so it will usually be treated as such.
Also, a properly configured root is not a weakness just like having a computer where you don't log in as admin unless you really need to can be just fine.
Is it really? £150 on backmarket for a phone which will last 10 years doesn't feel expensive.
Makes sense to me to run any banking on a secure device anyway.