GrapheneOS runs the google play services as a containerized app instead of a system level app, allowing you to disable access as needed. The downside is that it's only available for pixel phones.