Also I daily drive graphene and that has no Google play services

Unless you want push notifications.

Then you can sandbox