Huh, interesting. I patched my own image and didn't have a backed up boot.img, but now it seems Magisk has created a new one (perhaps it was just wiped when I was rooting the phone). I have dm-verity turned off. I'll see if it works when the next OTA arrives, otherwise I'll start playing around...