[Google Pixel 7 Pro] i5lee8bit:
I'm still not gonna consider myself out of the woods yet, but it seems to be ok this time. Pretty much 100% of the mods and root stuff I install are now back on and configured, and things seem to be working. I'm not sure which it was this time that makes it seem to work now, but there were 2 main things I did differently this time:

1) Immediately after restoring all apps from backup (I did restore from backup this time, lol), I checked for updates and installed all ~40 leftover app updates. Mostly Google system / services apps. So I let them all update BEFORE installing any modules, spoofing SafetyNet stuff, etc. No idea if this would make any difference at all.

2) I literally have NO system/OS apps checked on the DenyList. NONE. The only Google apps I have checked are Google Opinion Rewards, Google Wallet, and GPay. Besides that, my banking apps / whatever apps complain about root. For the last several months, I've seen a lot of debate about whether it's actually necessary to deny some of these Google services and apps. Heck, someone several pages back (sorry I'm not mentioning you specifically, it was over a day since I read it) even said NOT to check those Google services and stuff that are mentioned even in the OP. Some of these additional modules we use do it covertly for one thing, and I remember the GPay SQLite one being a big one (so much so that he removed it from his GitHub, lol - and btw, no I don't use that anymore either for a while now). Even back in the MagiskHide days, it was debatable just how many of those processes actually needed to be checked off...

Regardless of the fact that I no longer explicitly have any Google services denied anymore, I still get:

YASNAC = pass, pass, basic

Play Integrity API = device + basic

(all as expected)

Play Store certified after a data clear, and then Netflix, Hulu, Peacock all showed up and could be installed as normal, as expected.

Unfortunately I can't recall what order I did things on my wife's phone, as that was 2 nights ago. The fact that on hers, Google Play Protect, Google Play Services, Google Services Framework, Google Play Store, and maybe others were checked off fully and yet she didn't have my issue only further confuses me. And also keeps me on my toes wondering if it's going to start crapping out again anytime soon. It may also be worth noting that she wasn't fully Play certified on the first day, and only once the test USNF was released last night did I get her fully certified. Still doesn't make sense why hers didn't crap out, but maybe worth noting in case anyone else runs into this weird problem.

For now, I'm gonna play it safe and keep the minimal amount checked off in the DenyList.

EDIT: GPay setup worked, everything loading. Wallet able to add cards. Also able to login and use biometrics for Amex and Capital One so far. Pretty sure everything is fine, despite no longer denying all those extra Google system apps and services anymore! And I can totally see that somehow breaking all that stuff I described in my previous post... Will set up other banking apps and test more tomorrow. I need to go to bed, lol.

EDIT FOR @llin:

If you're using Shamiko to hide root, DenyList should NOT be enabled.

Also, there's a newer SafetyNet Fix specifically for our devices by Displax. It's labeled as "test". Search a page or 2 back and use that one. It'll pass CTS.