Developers on Google Play can enforce support exclusions based on a device’s SafetyNet status, which is also what Netflix has used to restrict access. Out of the box, rooted devices or devices with an unlocked bootloader are supported, but developers have two options that they can choose to change that.
As Google explains in this support page, SafetyNet Exclusions, as the feature is officially referred to, enables developers to exclude devices that either “don’t pass basic integrity” tests or “are uncertified by Google and don’t pass basic integrity” tests.
This restriction to devices that do not pass Android compatibility testing and do not feature proprietary apps that Google licensed.
Basically, if you get a device that does not come with the Google Play suite on it, like a Xiaomi smartphone that you purchased from a Chinese retailer, chances are it’ll be seen as “uncertified” and you will not be able to download apps whose developers have chosen that more-restrictive option.