If you go to Settings > System > Multiple Users you can create a new isolated profile. Once inside you can install the sandboxed Google Play services that ships with GrapheneOS to further limit any access it might give.