You could also run Google Play Services for essential apps like for your bank account as an example under a “work profile” using Shelter to isolate them into their own environment. However, I’m not sure how well that’s going to work after the app verification update since Shelter won’t ever be on Google Play, but Shelter will be evaluated as admin in that environment alongside Google Play Services. So, who knows?