Maybe this thread Google Play Services on my FF 5 and no idea where it comes from tells you the things you need to know on the subject.
Micro-G Companion (an essential part of /e/OS) mimics Google Play Services and shares the name com.android vending.
So you can tell Aurora not to update apps from non Aurora sources or use the blacklist; both from Aurora Settings … more / better words in the link.