AT&T are pretty much out of the question. They are now the most aggressive white-listers and they will boot you. As I said before, people have gotten Verizon working, but, yes it has to be a SIM muled in a Verizon phone approved for ViLTE on their network, and then moved to the Pro1x. T-Mobile and their MVNOs are the only ones in the US that just work,
Moving to Lineage still gets you the play store, using MineTheGapps 14 (see the begining of this thread). Other security intensive apps, I don't know. Depends on if they detect the unlocked boor-loader state (chances are, your boot