ROM is awesome. Got my XZ2 H8296 back from my son after 2 years, i gave him a Pixel 6 for Xmas last year.
I played around with the XZ2 and noticed it did not pass Safetynet check, no matter with or without root access. Of course Magisk can do this job for you, but for those who not want a rooted phone there's no solution. All my phones can pass Safetynet, with or without cfw, so i looked for an alternive way. Found an interesting addon, developed from some LOS devs, anyways, it's not official supported by the LOS team. Link and credits for interested users:
Contribute to luk1337/ih8sn development by creating an account on GitHub.
github.com
I made a ( personally ) flashable zip for me, want to share it. Edited the config for our XZ2 to match the fingerprint and proper security patch date from last official Stock ROM.
It can't bei flashed trough the LOS Recovery, dunno why, i'm not that expert, only advanced user.
Flash with TWRP.
INSTRUCTIONS:
* Enable USB debugging of course
* Copy zip to your internal SD ( optional )
* Reboot to bootloader
* Temporary boot into TWRP
( fastboot boot YOURTWRP.img )
* Mount system manually
* Flash the zip
* Reboot
Now you don't need Magisk modules anymore, the addon survives OTA, if needed Magisk can be installed, it's your choice. Remember, the ih8sn addon does NOT hide root, it only makes the Safetynet Check possible. To hide Magisk prior than v23.0 you have to Install other modules, search and you will find.
Last note for devs and maintainers of this wonderfull ROM, i had some probs with permissions, i specified 2 permissions in updater-script, maybe you can have a look into it, don't wanna break other things in the ROM because some lack of knowledge.
Flash at your own risk.
...