I think it is not true. It would help if the GrapheneOS project included some examples of how Google Play is privileged in the standard Android. Google Play Services can access all of the following, for example: clipboard data, network information and connection details, sensor data, the list of installed applications, app usage statistics.

You can install the sandbox without granting these permissions (and they are not granted by default).