GrapheneQuestion Does this mean that all apps that you log into a google account "need" to be on a separate profile? Seems like a waste of time to install graphene if not.
I don't think there is a single correct usage model or a single set of "needs".
For example, some people might use just the owner profile, and install only open-source apps built personally.
Other people might use just the owner profile, install Google Mobile Services, log in with a real-name account, and install Play Store apps without fear.
Some people use Aurora Store; some people use the Play Store with a fake account (both of those approaches are ToS violations, for whatever that might be worth, e.g., any day Google might intervene).
All of those people would receive benefits from GrapheneOS: fast security patches, improved hardening versus Google's OS, and Google Play running without special system privileges.