@cuddle@Mesoklima@stefano GrapheneOS provides our sandboxed Google Play compatibility layer enabling installing and running the Google Play apps as regular sandboxed apps with zero special access. No standard permissions need to be granted to sandboxed Google Play for vast majority of functionality including FCM to be fully working. Can use sandboxed Play Store to install apps if you allow it to request to install apps and like other app stores can do automatic updates for apps it installed.