You can use Magisk to get around those restrictions of you have issues.
There are also SafetyNet fixes you can flash post Lineage install that get around that sort of thing but it is a back and forth as Google is continually patching holes in their security.
My banking apps work fine, including Google Pay.
I really like Nova, but also prefer to keep as much of my data to myself so I blocked Nova access to the internet via app permissions. Also blocked branch domains on my pi-hole for peace of mind.