Graphene is more secure, a little more inconvenient tho but from my experience with a little bit of setup you can get it working just as great as a proprietary Android OS.

Google Play services are optional and sandboxed and they can only access only what you explicitly give them access to.