Yes, unfortunately you need to log into Google Play to use the Play Store. But if you didn't want to do that, you can always install Aurora. I just removed Aurora though recently because I kept getting rate limited and it was basically useless for me.
My last Pixel had Calyx installed and I used it for years. I'm on Graphene with my new Pixel as of early June. While there's no firewall app for Graphene, I get prompted to allow or deny network access for every app I install and can easily revoke access on any apps that are currently installed. I feel like I have a lot more control over the app permissions. I also have the Play Store and am able to use it. Google Play is sandboxed in Graphene. I highly recommend it.
@Replica
@lemmy.world