I thought graphene os has sandbox for google play services? Couldn't you use that with a qr code scanner and whatever else you need to bypass their attempts at locking down the ecosystem entirely, at least on GOS?