IDew

It isn't really an environment. You can install the Google apps without granting them a single permission and it will still work. What the sandbox does is trick it into thinking it has full root access like it's supposed to have. While remaining like any other installed app: you're in control.

You could make a second profile and run it solely in there if you like none of that.

An alternative to the Play Store to install apps from is Aurora Store which is basically Google Play but without needing an account. (Though some have pointed out this is insecure and unsafe, but I find that to be over the top. It really depends what your security thread level is.)

You can use banking apps in the private space included only in the stock launcher (which I ditched because it lacks customisation). Not sure if you can put the Google sandbox in there though. Why not make a second profile on the phone only for banking/google use? It's practically the same as secure folder and you can even apply 2FA if you want to login to the profile.

As someone else mentioned: do check for your bank app's compatibility here.

Factorio, my beloved

I think that's a totally fair mindset. I simply started with a rooted LinageOS device where I was in control and ended up here with less control but better security.. It's more stable and simple, but lacking customisation

That actually sounds quite accurate lol. I do like the additional option of having network switches and have sandboxed Google play services, but other than that there's barely any customisation that other roms do offer. I do miss crDroid some days.

Yeah I agree that they have very high standards

I recommend reading through this comment chain before buying from Murena..

https://grapheneos.social/@GrapheneOS/114355734916535526

Thank you for including a timestamp! I wish more people would do that.

I do not want to be near that hellscape when the sun is out.

Looks so peaceful

Nice

Hello fellow Newpipe (or whatever forked version) user :)