pull down to refresh

Graphene does the typical extra privileged access that Android grants to Google's apps, and has a 'compatibility layer' that keeps almost all of the functionality despite not having the privileged access. You'd have to get deep into the weeds to make a detailed assessment, but I run Discord/Spotify and others in a separate profile with Google apps.
Compartmentalizing feels pretty similar to what you might do with browsing/VPNs/Tor.