I know there are ways to do separate profiles on Graphene, and disable apps for specific profiles. So if you need a Google play profile separate from the more sensitive apps, it seems possible. Although I'm not really well versed in this stuff as to how much that helps.
I'm sure no matter my effor...