Aurora works fine for me, and Google's software needn't chug along in a background sandbox no matter if all it can do is install apps, ping back to the mothership what your IP address currently is, and act as a proxy for other apps whose direct internet access you try to deny
Note it doesn't work very well, and Graphene recommends using Graphene's sandboxed Play Store instead.
Aurora works fine for me, and Google's software needn't chug along in a background sandbox no matter if all it can do is install apps, ping back to the mothership what your IP address currently is, and act as a proxy for other apps whose direct internet access you try to deny