They don't block Graphene directly, they block any phone that doesn't have attestation, which the Graphene phone cannot have. https://grapheneos.org/usage#banking-apps

Basically, GrapheneOS on a phone counts as a "tampered" device.