Please try again with Mindthegapps, those are the officially supported ones.
No worries, only the Play Store and Services will be installed, so it is really minimalistic.
All other Google apps can be obtained as normal through the Play Store.
I read somewhere that the current stable Magisk has some trouble with the safety net attestation check. You need to update to the latest canary build if you want to see it passed.
But safety net should still be passed, it is just a display error.
I don't know, just asking ;)
Maybe because of some quirks with FDE/FBE?
Read too many "horror" stories of people mysteriously being locked out of their devices because they forgot removing PIN.
So I don't have to, right?
I would recommend to flash a custom ROM and flash Magisk, then enable Magisk's hide feature to pass SafetyNet certification again.
Not sure if Magisk can also be flashed on top of stock MIUI, maybe some expert can answer this.