I was facing this same question earlier this year. I finally decided on creating a secondary Google user profile, which has Google Play Store and the few apps I need installed via it. I only use this profile for a few minutes once a week, at best.
The reason I decided on this approach vs installing Google Play Store in the Owner profile is that if GPS is installed in the Owners profile then Google always has an active connection to your phone. With the secondary Google profile I went with Google only has a connection to my phone during the limited time I'm using that secondary profile.
While I think GOSs sandboxing of GPS is great, and my use of a VPN in all profiles helps to mitigate Googles access to my phone, location, and data, I still feel it's worth the separate Google profile to insure Google has very limited access.