Planning my first GrapheneOS install. I've read the FAQ, Threads, User Manual, etc... and have a basic understanding how how GOS works, sandboxes, profiles, but some of the specifics elude me. Most answers are variations of "depends on your threat model"

So my threat model in decreasing importance is :

Secure and robust connection and timely notification of client communications (Phone 3G/4G, SMS/MMS, Signal, Google Calendar)
Secure/isolated social media handling (FB/Insta) but no notifications needed or wanted.
Avoid leaking Contacts to any App other than Phone, SMS, and Signal. (including avoid google/FB/etc.. leaks)
Avoid keylogging, advertiser tracking, system/network fingerprinting
Avoid location telemetry unless explicitly enabled for Maps, Uber, etc..
Protect against SIM spoofs, mitigate potential exploits, including general targeted attacks or spear fishing. (I understand this is more user-behavior based, but Graphene is hardened and allows deep customization which could break an otherwise best-practice if not understood)
Avoid search/web history being recorded (I use duckduckgo widget which I believe is HTTPS)
I'm not interested in nation-state level defense.
I'm also wary of adopting too large a threat model, as I believe it makes one into a larger target by looking too interesting or unique. VPN and TOR is not always appropriate
I can't de-google the phone entirely.
I use Gmail IMAP for my webmail, Google Calendar widget, Google Maps with GPS, etc ... So I will be often pinging Google servers. My Google Activity page displays "No Activity" and shows all tracking turned off, so unless Google is lying about thier tracking practices, this all seems fairly secure even without GrapheneOS.... I'm sure I'm still fingerprinted by targeted ads many other ways

My needs are that at times I will be known uniquely on the device. (location, signed into unique social media accounts, google acount, etc..) and will also need unified sms/phone/mail access and alerts across all profiles. I would like some community feedback on how to make this least bad within Graphene OS

I'm not fully understanding how invasive the Google Play trio is or isn't, but it sounds like I'll need it on GrapheneOS for the basic functionality on at least 1 trusted/unique profile to fufill my needs.

I see three options . . . all improvements over stock Pixel

Option 1
Owner profile is the only used profile.

Depends only on OS App sandboxing for App isolation.

Option 2
Owner profile is used as a daily-driver, and a second profile is used for Social Media and leaky Apps

Enforce leaky app isolation through logging out profile to put at rest when not in use.

Option 3
Owner profile is restricted, and everything happens in additional profiles.
(ie: treat Owner as privilaged and don't use it as an active daily-user, but only for system-wide configs and changes).

Enforce isolation between All profiles, rotating MACs/Profiles per App is hardest to fingerprint, also hardest to administrate.

My questions specific to Profiles:

is Option 1 significantly weaker than the other options? What about Option 1 using Shelter or similar?
if Option 1, signed into Google and using Facebook as a PWA in vanadium, what else coud it access? How would being signed into FB on that profile allow identification to any other app/ service? Either as an App or PWA (other web tabs, google ID, etc..)
in Option 2 ... while using a second Profile for Social Media, will I continue to get instant call/sms/signal notifications for uninterupted client contact? or would I need to also install those Apps in the second profile
is Option 3 significantly more battery intensive? or complex to use in day-to-day practice?
in Option 3, would doing a single update from Google Play update all Apps in all profiles? Would each then need their own settings configured, or all inherit the Owner settings?
when thinking about Profiles, The FAQ says each profile is like an identity .. how is it different than Qubes? I know it's far less isolated, so in what ways are the profiles limited here?
Why is having 32-profiles with 1-app each all notifiying a single UI a bad idea?

and my more General questions

for social media, what is the compromise of using Facebook/Instagram as PWA's in vanadium vs. installing the apps themselves?
I read each reboot spoofs a new MAC address, but this doesn't apply if using cellular data correct? Only WiFi networking? ... or does each profile spoof unique MACs between at rest states? the device only ever has 1x active MAC correct?
Given that I always need access to my email (gmail hosted), and I'd be signed into my Google ID for Calendar Widget, is there a configuration that preserves the most of my threat model?
Can multiple profiles each be signed-in as different google users? What's to stop google from linking all accounts as originating from the same device?