They want to harvest the data, without Google’s control, and give none to Google.
That can be easily done with AOSP, to my knowledge there’s no Google stuff in there. Which is exactly what they’re using right now
There still is some google stuff in there, like for example phoning google servers to check internet connectivity among other stuff.
Yes, but those minor traces are easy enough to remove, especially if you don’t care about being “ceritified” by Google (i.e. are not planning to run the Google services).