This is an issue with the app itself, my banking app works fine. They might have changed the checks for device integrity/security or indeed something about graphene has changed for it to have triggered now. As far as I know, there is no root (the app likely just mentions that by mistake).
I don't think grapheneos promises or even attempts to pass these tests. It's your bank that thinks it needs McDonald's level security theater.