What you do with Google Play Services ? You disable it ? Block with firewall ?
Im not sure what todo. Play services needed for Mainline updates… https://source.android.com/docs/core/ota/modular-system
I can disable Play services and i get more privacy, but lose on security, because i will not be receiving mainline updates 
Depending on device… maybe you can install an Android distribution that publishes regular updates, but does not push Google down your throat
True, I’m getting sick of repeated update reminders. Honestly they should make update reminders illegal.
Nope. My current device bootloader is locked 
I have a Samsung device, so I’m limited on what I’m able to do but I still try. This is from something else I wrote on limiting Google:
In Settings → Google in Google services → All services → Privacy & security Select Ads and either Reset advertising ID every so often, or Delete advertising ID but know the consequences of the latter.
In the same All services area, click Usage & diagnostics to disable it.
Turn off Improve Location Accuracy
Go to your accounts Manage your Google Account, Data & privacy and disable all the Activity tracking (Pause it or turn it off).
If you rely on Google services, in the Data & privacy section, it is helpful to run a Privacy Checkup.
When you’re done, always go to Settings → Accounts and backup and remove the Google account. You can also block it with a firewall, etc.
Once a day, I enable everything and get my updates and repeat. Its a pain, but the best solution I’ve found for a non-pixel device
I recommended that you remove Android System SafetyCore.
you think you gain anything by disabling them from their own toggles and then reenabling them? 
Install a Firewall app like Netguard ot Rethink, block all, (manage system too), allow few FOSS trusted apps for trusted services. 
I haven’t even tried complete FOSS on a Samsung, I imagine it’s pointless?? I’m thinking I gain not pinging Google throughout the whole day while only enabling for play store updates. Knowing Googles tactics, they may still be able to see all of my daily activities from a single update IDK. I disable and block completely with RethinkDNS when not in use.
Have to keep non foss apps up-to-date right?(banking, etc.). Maybe I’m wrong but it seems better than the alternative for those not worried about the hassle.
Use Aurora, it still leaks your device and IP, but not the rest of your life
Maybe I wasn’t clear In my post, im talking about completely removing your account from the phone. In “manage accounts". So a Google account doesnt exist on the phone anymore like on a fresh install.
not sure what that means, or matters, google account or not, the google apps connect to google every minute of the hour… or if not google apps then apps that have google libraries (hence a firewall that allows you to block per app domains is the best), if Netflix wants to connect to nflx.com ok, but block googleapis.com etc
That’s exactly what I’m talking about. I’m just taking the extra step of also completely removing any Google account associated with me from the device completely so if I miss some obscure way of Google sending information to itself I’m covered.
I can see in my initial post that the firewall looks like an afterthought. Yes definitely also block any domains associated with Google with a firewall.
Most of the concept I’m talking about is outlined here, minus the obtainium recommendation:
The original question was about Android mainline updates…
Apps i can update with Aurora and keep gplay firewalled forever… But what about mainline updates, these can only be downloaded by google play.
You do this daily enable/disable ? Not sure if such thing worth the benefit you get.
¿Block?.. ¿What if we think about the possibility of UNINSTALLING and GIVING OUT of Google “Services”?.. If we do not have true “vital” needs for the capital G to be omnipresent on our devices, it is possible to continue living without so many “Services”… Although always keeping in mind that, on Android, all roads lead to “Rome”… Therefore, we will have to do what we can to find a balance between “security” and “privacy”, if Google allows us to do so (
).
And according to Google, that means: “Give us your sensitive information, we don’t give a crap about you anymore, just everything about you so we can data broker it to every other company in existence and hand it over to governments so you won’t be protected anymore.”