My setup on GOS
-
main profile
- no play services
- this what I use most of the time
- Apps installed via F-droid or Obtanium
-
secondary profile
- using play services and store to install apps (I prefer bank apps to be installed from a trusted source, which Aurora store isn't IMO)
- disabled background running on this profile
Additionaly avoid apps as much as possible, use web version when available.
If I need or must have an app I switch to secondary profile, do the business there and end the session.