Not entirely. With GrapheneOS, google play services and any other google apps have the same level of control over permissions as any other app. So you can deny

Not entirely. With GrapheneOS, google play services and any other google apps have the same level of control over permissions as any other app. So you can deny access to any features that you don't want it to have access to. Others in this thread have recommended using a separate profile for google apps so it's not even running when you're not using it.