I wrote this post earlier (https://discuss.grapheneos.org/d/12374-configure-phone-for-multiple-purposes-digital-detox-and-hand-to-the-kids/11) but that got kind of long and involved, so I'll summarize.
Is it possible to lock down a non-owner profile such that it has very few permissions?
For instance, can I have a non-owner profile that ONLY has phone, and for instance, a calculator? And this profile doesn't even see any of the other apps, even the built in ones like Vanadium?
I'm not able to figure out how to do that. I go into the secondary profile, disable App installs and updates. But when I log in to that profile, they can see all the built-in apps, and it doesn't appear there's a way to remove them.