If someone have access to the Google account we use, can he see what phone and apps we have and can he force install on the phone apps?

I would say no, otherwise how Anonymous and Anonymous (insecure) work? Or maybe there is some kind of proxy in the latter cases.

Same question with Play Store instead of Aurora Store. I have in mind my no trust virtual machines with Waydroid GAPPS system type.