“Find My” network is pretty strict by its nature, if you’re talking about that. Realistically speaking, I wouldn’t be scared of it, because I can’t see any vector from which it can be dangerous to the end user.
Nonetheless, “Find My” is an optional feature and can be fully disabled. Other Apple web-services can be blocked on a network level, if you want it for some reason. But, IMO, at this paranoia level, the only right option is OSS with a strict firewall.
I would root it and use Droidspaces. With all postmarketOS pros, not properly battle tested custom Linux ROM is not something I would use for any kind of hosted service.
Droidspaces is nice, give it a try.