On graphene, I use Google Gboard with zero permissions granted: no network, camera, contacts, etc. I think in this state it can do no harm but it works way better than any of the oss keyboards I've tried (and I've tried many).