rarelyrare Where files are seperate even if you gave a file manager full access to files on that profile?
Yes, they are separate. No app running in private space, no matter what permissions you gave them, can access files in main profile. And same other way around. In fact, they cannot even see the existence of files cross-profile.
But you as the user can grant an app running in private space temporary access to a single file in main profile, and other way around, using share file functionality or the file picker. The share file functionality and file picker are privileged system components only you as the user can interact with, no app can use them by themselves, so you are still in full control about what files you share or send cross-profile.
rarelyrare Apps in private space can't see apps outside private space?
True, they cannot. And same other way around.
Only Settings app and Launcher in main profile can see apps in private space, but they are privileged system components. Regular apps cannot. Or so I heard, I haven't tested it myself yet.
rarelyrare VPN connections inside private space only happen inside the private spaces apps if you have a VPN app running in the private space?
True, the main profile and private space have their own VPN slots. So if you configure a VPN only in the private space, all private space apps will use the VPN, but no apps in main profile would.
rarelyrare Google play services installed inside private space can't touch apps and all in main?
True, it cannot. Google Play Services is just a regular app with no special permissions at all. So just like no other app in private space can talk to apps in main profile, Google Play Services also cannot.
But there is a known bypass bug where an app can use localhost connections to communicate with apps running in other profiles that agree to that, but as far as we know Google Play Services is not exploiting this bug.
rarelyrare My all around question I guess is should I switch from using work profile for my Google play services required apps and apps I don't want on my main profile, or is it a lot different than work profile?
The GrapheneOS project just recently made an official
announcement recommending to use private space instead of work profile, because private space has better security and privacy than work profiles, while also offering better system integration.