Hello to Everyone.
Writing this post for a few questions I have about how to compartmentalize my phone with gos system. First of all I want to protect my privacy from big tech, I don't want to be schedulated for ads and so on. In some case I want pseudonimity, for example I use reddit and x just to read subjects and news I follow and I never post on them.

I have this following preliminary question:
-If I have 2 apps in 2 different "users" with 2 different accounts and VPN, the company knows is the same phone?
-generally speaking is better use the browser WPA or the app? I'm wondering if I gain privacy using x, reddit etc on vanadium creating pwa (same vanadium for all services).

This is basically how my phone is compartmentalized and I'd love you guys with your experience help me please about mistakes or privacy vulnerabilities on my setup. (Every apps have permission set and restricted)
"OWNER" account (main): all open source apps from f-droid. Here I have VPN exit A, no play services installed.
Private space under "owner" with meta apps: WhatsApp (necessary evil for me), Instagram and fb (unnecessary but having WhatsApp I supposed its not a big problem to have this other two sisters). Here I don't have VPN. I have play services installed (without login) for notifications.
Another private space (works space) under "owner" created with shelter app where I put closed source app without network connection and browser pwa of x, reddit, chat gpt, substack. Here I have VPN exit B, no play services installed.

User: "GOOGLE": with all google suite with login, including maps and all apps that didn't work without play services. No VPN here
Private space under GOOGLE with all apps closed source that's work without play services. No play services here. VPN exit C.

User: BANKING: here I have bank apps with play services without login. No VPN.

Now, I'm buying a new phone and I can revolutionaze this setup. How can I improve it in your opinion?
-should I consider to put "meta apps" from private space to a completely different new user with notification always on? Because I feel I have some leaks and I see it on Instagram for examples about targetized ads.

-is it worth to have "meta apps" separated from "google apps"? Since I need for work notifications from both companies, is there a real privacy problem to put " meta" and "google" togheter?

-since all apps are sandboxed is really useful to separate in different users, app that works with play services and apps that didin'?

-about sandboxed, an app what can see about other apps and about phone informations? I mean, this is a provocation from my ignorancy: why don't put everything togheter in the same user? Just to have different VPN exit?

-how do you use private space and users usually?

Clearly I tried to find answers to this question but I didn't in a completely way and same were fragmented. I would be grateful if you could clear up my doubts.
Many thanks!
Sincerely