I run graphene. I have the play store and Google installed -with zero permissions- especially not network. I use aurora store to get my apps. Play services installed with zero permissions. Things run pretty well. No Google apps that require sign in.

Honest question. Can someone please show me where I'm going wrong with privacy and security?