@HybridStaticAnimate @codebam @GrapheneOS

That it must be installed by the user doesn't make it different.

IMHO the two app stores included in GrapheneOS are not sufficient for the vast majority of users.

If "every" user needs to install it to have a usable phone, it really is part of the attack surface.
(And yes, I'm aware the Play services are sandboxed on GrapheneOS which improves privacy and security)

It's a bit like delivering a computer without network functionality because it reduces the attack surface, and then blaming the user if they install network drivers.