GrapheneOS has Google Play Services with Play Protect. All you need to do on any Android phone is disable the app permission for reading other app packages or get usage data, using AppOpsX with ADB or AppOpsX with Shizuku. The sandboxing is almost meaningless when app permission control does everything in Android.