Play services actually works very well for containerizing work apps. Better actually than on iOS. My work can offer a set of apps that are available in this isolated container and apply policy to them that doesn’t impact other areas of the phone. I can also shut off all of them with a single button when I am on PTO. Microsoft’s apps require these services to build the container, and I believe Android phones in China do not have play services. It’s not perfect, but I personally think it works very well.
At one point I had been playing GTA V online pretty consistently when I had a cheater start targeting me. It was pretty frustrating and after 30 minutes of that I gave up and closed down for the day. I shifted my attention to other games after that. I definitely get that they want to stop cheaters - cheaters ruin the fun for others. It’s a shame that the new anti cheat has made it so that Steam Deck players are stuck unable to play online.