My pre-rooted ROM for this device will actually be using Magisk 14.0 Systemless User Interface with full SafetyNet pass. Yes, correct; Magisk Manager does provide advanced options to allow dm-verity and force encryption to remain intact. I've personally never had the slightest use for dm-verity or force encryption. But, that's my personal opinion, and I'm sure there are users who would opt to use these features.Many thanks for clear summary!
Couple of related questions:
Re. disabled encryption:
Will device / processes work faster with encryption disabled? And will this affect adoptive storage in any way?
Re. dm-verity:
Is there an option in this ROM to turn dm-verity on or off (as with force encryption)?
Re pre-rooted ROM:
Is there any advantage in supplying ROM pre-rooted? (Some OS customisers (eg OctOS) have dispensed with pre-rooted versions in order to give users greater flexibility.) I ask since I'd like to try Magisk on this device as I like some of its systemless modules, as well as ability to pass Safety net check.
Incidentally, I just noticed Magisk Manager has Advanced Settings to Keep force encryption, and Keep dm-verity. Turns out (from Magisk XDA thread) that these are disabled by Magisk root by default, but can be toggled back on. Read that dm-verity may be needed for OTA updates. Read that leaving Keep force encryption disabled means that if encrypted data is removed (wiped), it won't be encrypted automatically on next boot.
Might try Magisk on tablet soon to see if it does the same job, and report results. Works fine on my Huawei y550 phone with Lineage OS, and seems to be un-encrypted (shows option in Security to Encrypt Phone). Thanks, PW.