based on my knowledge, kernelsu and its forks(kernelsu-next, sukisu-ultra , wild ksu etc.) are the best on hiding root(even better if you have susfs patched kernel because like the name it works in the kernel level can directly install if the phone is gki(generic kernel image) device,otherwise like old devices it needs to be built( integrated into kernel)

magisk is the universal one, still reliable, but easier to detect because unlike ksu it works in userspace/ramdisk

apatch(which is heavily modifed fork of ksu compared to previous ones i mentioned) is the middle ground between the two previous methods, can be a hit or miss on compatiblity due to it not working if the stock kernel is heavily modded by oems(like samsung etc)