The project advises installing all three components - GSF, GP Services, and GP Store if you plan to use any of the sandboxed Google services. And it's safe to update GP Services via GP Store. No account sign-in is required.
GsmCompatConfig is controlling the max approved version of GP Services, so everything will be all right.