Thank you.After several tried and tricks, i currently stick with root and masked fingerprint with magiskHide Props config (via magisk root). Device is certified with Google play and no restrict anything (FOTA is fine too, but need reflash patched boot.img from magisk everytime you applied your update file). Gonna try force mount Vendor partition into rw instead of ro but my device is already encrypted. Force Vendor partition into RW means format all data (almost 100gb from game data). Since COUNTRY is belong to Vendor partition, but it locked totally and can not edited as RW. I'm currently not available temporarily since it's TET holiday in Asia. Gonna write down a quick guide asap when i have free time.
I will be waiting for the information you can share with us.
Regards.
Enjoy your rest!.