

No, Aurorastore is still worlds more private than Google Play, and until now it was really reliable!
It runs as an unprivileged user app and uses randomized accounts. You can add all apps you dont want Google to know of to your blocklist, so the unique fingerprint from your app list is extremely reduced. Google Play doesnt do that. Aurora is WAY better for privacy
For security yeah, you can use google play and add the signatures to VerifiedApps


Yes they are unprivileged, and the gmscompat tool doesnt give them more access that is true. Still it is google software with the intention to control your device and spy on you, while Aurorastore is a slim app that even allows to restrict the apps it tells to Google.
It is less data. GrapheneOS will have less system apps than stock android so that immediately gives it away.
Asking Google for updates is also different from telling it a complete list of your installed apps. You might simply not try to update these system apps currently.
In the end, it is really good that play services work on GrapheneOS, but they are still more invasive as regular user apps than alternatives.