I can pass safetynet basicintegrity + cts only without EdXposed installed (just Magisk and PropsConfig/fingerprint change) - even when I put all gapps on the blacklist and hide. Haven't tried to hide sudo, but I dont think it makes a difference... I have read somewhere that with Android 10 EdXposed can't be hidden from safetynet anymore...?
My actual question was, if someone has tried to deactivate the EdXposed module in Magisk and made safetynet pass this way...and without losing the EdXposed modules/settings...
Anyway, I "solved" the problem and erased my last google apps/services left on the phone: GSF and Playservices. Now I get a big red "SafetyNet API Error" warning... LOL! Who needs google push service and google depending apps, anyway nowadays... Everything works fine - faster than ever - even my banking app (which, however, I had to decompile and change a little bit
)