After a few updates, this one fixed a couple of things:
Magisk SafetyNet check: Success (!!!)
Play store: Device is certified (!!!)- after uninstalling updates of Play store
Widewine (Security level): 1 (!!!)
THANKS!
Mi 9 lite (pyxis)
dirty flash (install rom, reboot to twrp, install Magisk...