There’s really no “adapting”, you are either ok with a secure app working on an unsecured device or you’re not. Graphene may, ironically, be more secure than stock, but the bank doesn’t know that and it certainly doesn’t know the person operating it.