It's a bit worse than just Google libraries, apps can use Play Integrity which uses hardware attestation to validate it's bootloader lock status and that it's running a vendor signed and Google approved ROM.

Current bypasses emulate older devices without the necessary hardware, but those will eventually stop working and there won't be bypasses unless someone leaks some master keys or finds TPM exploits to trick it into signing the integrity request. It's very bad.