You don't need any Google stuff on it. Isolated Play Services is an option, so is Play Store. It's not installed ootb. I don't get why you'd prefer to run less secure options on hardware that isn't on par with Pixels or iPhones and expect to get a secure OS.