Hi there,
I only install open source and trustworthy apps in my main profile, the only 2 exceptions are Google Messages (for RCS use) and WhatsApp, both installed through Aurora Store, I don't have a Google account.
Of course I need the sandboxed Google Play Services and Google Play Store to make RCS work and here are their current permissions:
Google Play Store: Network and Sensors
Google Play Services: Network, Notifications and Sensors
Obviously I had to allow other things to make RCS work in the first place. So what do you think about think about the current state (privacywise) of my main profile? As far as I know, only these 2 apps need GMS among my apps.