I have separate profiles:
- main user has no Google Play services or Gapps: just F-Droid apps and a couple of play store apps I use daily (anonymously via Aurora Store app)
- Aurora profile has other playstore apps that will run without Google Play Services
- PlayStore profile is for anything that requires full Google Play Services (banking, purchased apps)
- Work profile is full-on Google everyting (Google school)
- Location is on, but only shared with Organic Maps, FindMyDevice (FMD) and Transit.app
- USB port is power-only (no data).
Some compromises I've made:
- I have fingerprint unlock enabled (but not on my password vault or PlayStore/Banking profile)
- I tap-to-pay with a Garmin watch ( you only need the Garmin app to set-up the credit card, then it can be deleted )
But... I think starting-out, don't worry about it. If you load all the same apps as on your old phone, into a single main profile, it'll still be a huge improvement.