I skimmed through the paper. I m thinking of keeping it to give it to anyone who asks me why I bother replacing stock ROMs with LineageOS on my devices.
Before this was a thing I used a custom ROM on every device, but now it's quite difficult.
As a rule of a thumb if you install pure lineageOS+openGAPPS+fdroidPriviligedExtension you will have a working safetyNet. That means no root module (but you can get root by enabling adb if you really want it, e.g. for GSAM battery monitor I give it the battery stats permission from adb). With this setup my phone has google pay working.