I just ordered a pixel phone to put GrapheneOs on and I have 2 ideas each of which is a way I can utilize google apps in the most fortified setting.
use a google specific profile. use a VPN on that profile. It's sandboxed from other profiles. I realize the VPN isn't gonna stop Google from identifying me seeing how I'm logged into google accounts or whatever, but it's just another layer of security on top of VM environment of profile.
don't put google on phone whatsoever and have my old secondary phone (samsung) on and tether to it.
This might allow for things like android auto on samsung via GrapeneOS internet connection, but it also might create link between the phones in some way.
I've seen links about tethering in semi hostile environments so maybe I can usb tether the devices assuming that's a secure idea.
I'd love to hear thoughts on these approaches and potentially better ideas. I do have some android apps I want to have access to, but trying to find the best path forward.