dasaint100
dasaint100 Would downloading and installing apps into each profile be more secure than installing on the owner profile? Reason would be it reboots to owner and will have a list of all the apps. A blank owner profile would be less attack surface?
I could technically see this being the case but do keep in mind there is some benefit to having apps installed and disabled in the owner profile. Namely things like VPN and Tor related Apps so you can install them into different profiles without the need to risk compromising your connection nor identity just to get them again.
dasaint100 Rethink DNS/Orbit or Invisible Pro? Have used both. Possible issue with Invisible and Graphene DNS. But it does have Man in the middle alerts and protection and a working firewall, plus can work as a VPN.
I will say please avoid inviZible Pro. It has very big issues namely with the stable version being behind in security updates on the proxies (I wouldn't want a app controlling all my connections lacking behind in important updates personally.) and the fact that it prefers DNSCrypt over the Orbot DNS Proxy which could severely harm your attempts to be anonymous. If you want to use it anyways I would at least suggest not enabling the DNSCrypt Proxy for it
Extra note if you use Rethink + Orbot be sure to set the Orbot be sure to set the correct DNS Proxy for it so you don't leak DNS requests
Of course this all depends on your threat model too.