Best configuration for google account and secondary / work profiles

n01

Hi everyone,
My current configuration is the following:

secondary profile with my personal Google account (I can not get rid off completely) and only the essential apps I need in that profile
work account on main profile (with Shelter) with sandboxed google play services but without logging in in a google account and installing apps from aurora

My questions are:

if a certain app requires a logged in play store in my work/shelter profile, is better to use a throwaway account or, since I'm already using my personal one in the secondary profile, it does not make difference and I could use the personal one without any additional privacy disadvantage?
is there a configuration you think it's better ?

Elysium

I think having at least 3 profiles is the best.
I only use my main profile for obtaining apps. I only use Obtainium, and if I cant get them there, I will use the PlayStore (didnt need to use a phone number to get an account). Avoiding Aurora and F-Droid.
I will never give apps network access on that main profile - once they are installed I disable them manually.

My user profile I use most, is with no google play services/store installed. They are mostly FOSS apps via obtainium, or apps that I know that value privacy, downloaded from playstore.

The third profile will have google play services installed. I use this for finances, paying over nfc etc. I ended up having to setup a google playstore account there for 1 app, but it won't see the other apps, that are also from a google play store account installed via the main profile. It doesn't seem to make that connection, which could be useful info to you.

I have a 4th account for google play services without a google account. I use this when I really need to use google maps, because open source variants are sometimes lacking. I downloaded maps for specific areas, so I can use it offline and then turn off network access.

Often I have to tether my phone to e.g. a laptop, which is probably not the safest idk? To share internet connection over it. The problem is, this can be only done via the main profile, where I do not have apps installed and set up. This means your 2FA codes are on another profile, and if you switch your connected device loses internet connection. As a result I ended up using private space in the main profile for 2FA/Passwords.

This also means that if I have all profiles active, the device consumes 5 VPN connections alone, at the same time. Add a PC or Laptop or Tablet. You run into restrictions of your VPN providers. I had to settle for ProtonVPN as it allows up to 10 devices. Mullvad sadly only allows up to 5.

So yeah, I would use a throwaway account nevertheless. I don't know what google can extract if I use the same account on multiple profiles, I just avoid it by using a 2nd account.

ProfessorMonks

Elysium This also means that if I have all profiles active, the device consumes 5 VPN connections alone, at the same time. Add a PC or Laptop or Tablet. You run into restrictions of your VPN providers. I had to settle for ProtonVPN as it allows up to 10 devices. Mullvad sadly only allows up to 5.

Just a point on this, if you set up a connection on each profile using the official Wireguard app with a mullvad config file, you'll only consume 1 of the 5 connections for mullvad.