Recently looking into the multiple android alternative offerings like CalyxOS, e/OS/, etc and came across these few issues which point towards privacy/security concerns.

• microG Push notifications still go through Google's servers just like with Play Services

• microG uses proprietary Google Binaries for some of its components such as DroidGuard

• Choosing a network location like Mozilla to use with microG provides little to no privacy benefit over Google because you are still submitting the same data and trusting them to not profile you.

Are they true and how can I circumvent them?