If someone wants to use GBoard privately, they would have to revoke network access and ensure GBoard cannot send data over IPC. The easiest way to achieve the latter is to not have Google Play Services installed in the first place which leaves you with no proper and secure way to install GBoard as Aurora Store is not recommended for use or third party websites like apk mirror. Is adding mirrors of existing Google apps planned for the app repository?