Some bank apps used to work on rooted phones, but thanks to Google SafetyNet (proprietary spyware which reports metrics about your phone to Google so they can determine whether it is "safe" for apps to run) a lot of apps that never did rooted checks have started using it.
It might be possible to use XPosed to trick apps into think that the SafetyNet checks passed, but I bet they've worked hard to make that as hard as humanly possible.
It might be possible to use XPosed to trick apps into think that the SafetyNet checks passed, but I bet they've worked hard to make that as hard as humanly possible.