I am not sure if this is true, maybe I am misunderstanding something. I use GrapheneOS and can use all banking services in Norway just fine. GrapheneOS does have a translation layer or something like that for Google Play Services, is that what you are thinking of?

Or even run the app as is on a "non-compliant" os - like a rooted android.

Oh I see. Thanks for the clarification. Is that something they could have gone without and still be as secure as possible?

This is in comparison to private corporations who have a profit incentive to monetize your data in every disgusting abusive way possible. Companies with a fiduciary duty to exploit every possible potential for profit or they can be sued by shareholders? Companies that aren't publicly auditable so you'll never know who they're sharing your data with? Like the recent trend of cars selling your location data to your insurance company who then uses it to hike your rates?

You're comparing a government who has to be bribed or break a law in order to share your data at all with corporations who have a duty to sell it to the highest bidder. And in this comparison your conclusion is it's the government that you can't trust?

Sorry, I have to say I'm completely baffled by your statements right now.