Even though Google removed "don't be evil" they are still not that bad compared to the rest. Yes, they enjoy looking at your private stuff, but the worst thing Google does is ban your account because of a mistake, then spend months reactivating it. Which is why you shouldn't use Gmail for login on important platforms.
I'd say just use Google as normal but restrict access to irrelevant info where possible, which is where GrapheneOS comes into the picture. And whatever you don't want to lose by accident should be stored somewhere else or duplicate it. (just like selfhosted NAS vs house fire)
As for being tracked on internet: The big platforms are just too good at it. They buy random info in bulk and then sift through it. Ref SLEEP AS ANDROID, and old (just?) Facebook app.
Group up untrusted apps in a separate user profile, and tinfoil hat stuff in another. Then use the rest as normal in owner, and disable permissions where possible. Install apps in owner and let owner manage the updates, then disable apps that shouldn't be used in owner, and "install available apps" on the user that needs.