AcclaimSublevel19 very poor excuse for having to use Google Play apart from the obvious compatibility layer that doesn't work for some apps anyway.
Play Protect doesn't as much focus on scanning apps provided and vetoed by them as it does on scanning third party apps not provided by them (and lord knows what else it does on the side) which should not be their business. Aurora instead forgoes this security theater and gets apps straight from them according to your spoof manager. You still get notifications of updates and app can even autoupdate other apps if you can get it running in stable manner.
Obviously the app still provides information to Google but in a way reduced, restricted and pseudonymised since it doesn't rely on a particular Google account.
People need to know that there is more than one way of obtaining Play store apps (and not really a security nightmare, which can be argued) whether they will work or cause compatibilty issues. I am saying that with all the respect that I have for GrapheneOS developers and work they have done over the years.