Comment by dns_snek

GrapheneOS sandboxes Google Play services, it's just a regular app without any special privileges. You can remove all of its permissions.