VAULT There is a high chance that Google account will get banned if used with Aurora.
Sandboxed Play Store is the most secure way to install apps.
People who prefer not use Sandboxed Play Store (and Play Services) are usually concerned that most mainstream apps have built-in functionality to communicate with Play Services over IPC which means there is a possibility that Google will be able to collect more data.
If you install Play Store in the Owner profile and use a secondary user profile as a "main" daily driver profile where most of your apps are, they won't be able to communicate with Play Services in the Owner profile. You can install apps from Play Store to the Owner profile first and then copy them to other profile(s). Updating apps in the Owner via Play Store will also update apps in all other profiles automatically.