Magisk can embed the necessary vbmeta flags directly into the boot image during patching. The boot image already holds the kernel + ramdisk; adding a small vbmeta stub tells the bootloader to skip verification only for that boot image , leaving other partitions verified.
fastboot flash vbmeta --disable-verity --disable-verification vbmeta.img Samsung Devices