If you are setting up a new phone on Android 12 or an older custom ROM, downloading is still a smart, reliable choice. Just remember: Enable Zygisk, configure DenyList, and never forget the Universal SafetyNet Fix.
DenyList is weak alone. Install MagiskHide Props Config (for basic spoofing) or Shamiko (to hide traces). Also, hide the Magisk app via "Hide the Magisk app" in settings. magisk 24.1