Comment by dyndos

Note that the GrapheneOS developer has indicated they are working on getting the Google Play Services apps to run sandboxed like normal apps, without extensive system permissions. This could be quite promising.