CharlieMander
Fortunately, having a good main/secondary profile is not a competition, so you can freely do what you feel like :)
I would say that there's no meta setup, otherwise everyone would apply that and I don't think this is the aim of this OS.
Privacy is important, intimate and subjective, you and you only know how much you are willing to give up for your things to work your way.
I would say that some people here will suggest you to not install Pixel Camera and use some FOSS alternative instead.
I also bet there are people here thinking that because they are using GOS they can install whatever, and be fine.
The first thing you should ask yourself is 'Who is my "enemy"?'
Everything is a game of perspective.
For example, if you consider your ISP as not trustuble, your lack of vnp might be considered a bad thing.
If you don't trust Google, installing Google products could be seen as a bad choice.
If your don't trust me, you already did everything you needed to.
If you don't trust that random developer on GitHub, suddenly also FOSS apps become a minefield.
In other words, it's impossible for others to tell you if what you do is enough.
Generally speaking, if you only have FOSS software, no Gapps and just 2 paid apps with no permissions, it is considered a good thing. (could be worse or could be better, that depends on your objective).
GOS gave the opportunity to install Gapps with user permissions because they live in the real world and understand that people will need it.
Until all the developers in the world stop to depend on Google software (never happening, imho), we will always need Google software, is that simple.
It's better to have it sandboxed and run it as simple app instead of not using it because of a romantic war.
Of course that is not for me to say, if you can live without Google software, I will be just jelous of you, considering banks and government apps I need to run...