it has MUCH less access to your phone on GrapheneOS than stock android and can even be limited to only contexts where its required.

plus Graphene still blocks a lot of the other attack vectors that corporations use to track you like Dynamic Code Loading and Memory Tagging. to say installing google play services to your main profile defeats the purpose of GrapheneOS is to ignore like 80% of what GrapheneOS does and how it installs google play services