Added some customization (yes, I'm lazy to write see screenshots)
Device is certified and safetynet passed by default for non-root users. Root users need to enable zygisk and add play store, google play services to denylist
After flash magisk install magisk app manually
If you change the kernel, after enabling Reading mode screen will be black, just force reboot and it'll applied
Magisk has a small delay to display the root permissions screen, so be patient :)