Knox is used by Samsung own functions. Your bank app only does a root check. Which can easily be hidden with Magisk. If you trip Knox, you lose the Samsung exclusive security features baked into the OS. That’s it. Google Pay and USAA both complained about root access and refused to work with Magisk hiding off. With it on, they function as normal.
Integration into Knox requires enterprise device management and a custom app.