I use GrapheneOS and NextDNS. And NoScript. There’s some overkill there but I figure why not.
To your question, GrapheneOS has put a lot of thought into features like sandboxing Google Play services so you can choose to use none/some/all depending on your preference. I would think that’s probably a smoother experience than trying to block google services selectively via NextDNS. GrapeheneOS also makes it easier to manage per-app permissions and security features.
I had an NC100. I used to write BASIC games on it. Fun device, very limited obviously but super cute with a nice keyboard. Good times