How does the tool actually check for this?

Does it just use the Play Integrety API, or does it use some kind of other attestation check?

The need for full root privilege has fallen by the wayside assuming you can trust the OS running on the device. I dont hate this change if I can run a custom ROM that will report that the user does not have root privilege and that the OS has not been modified since boot.