I don't think people use ROMs as much as they used to. Especially since mobiles are so fast nowadays that they don't get slow even if the ROM is bloated.
Rooting with Magisk usually isn't enough to trigger SafetyNet failures (which is what most apps use to detect "rooting", among other things). I've been running rooted on my OnePlus 6 since day one without any app ever complaining, including google pay. Custom ROMs will fail SafetyNet typically, but there are ways around it if you want to keep hacking.