With Magisk, I can have my SELinux set to enforcing, which enables my devices to pass the SafetyNet test. Such things like Android Pay work because they don't see the root There are some nice ways recently to have security but also control of your device, especially with Nougat.
If you take the time to look, you can almost always find someone that discovered a root method. Hell, I've rooted three phones now that were 'un-rootable' when they came out. The result is directly related to the effort.
The best thing for us to do is buying phones that are unlocked and root/developer friendly. That's why I recently got a OnePlus 3T (Literally a box you can check in settings to unlock the bootloader).
Closing statement:
GG has the authority to peer into/modify the data of other apps. Wouldn't such a thing require elevated permissions? It's like asking a developer, to make a Linux application (which is installed to the system folders), that modifies system data + other apps' data, but figure out how to NOT require sudo to do so (hehe, I rhymed ). And Android is literally a lite distro of Linux, with other aspects included (like java).
Make me a sandwhich. No.
sudo make me a sandwhich. Ok.