I want to return to GOS setup of using the owner profile for downloads and updates of apps via play store, obtainium, and accrescent. Then using a user profiles, depending on the case.
I only use Aegis as my 2FA for proton drive (which uses 2FA) which stores my passwords, I also back-up Aegis to proton drive.
On that note (I've probably answered my own daft question) should I use a separate 2FA method for proton, rather than Aegis?
You could use a separate 2FA for Proton services if you want, sure. But then you have to deal with that backup, right?
You may run into issues with bouncing between profiles and using 2FA codes with your proposed setup. So you'll want Aegis loaded in all your profiles to keep things functional.
I believe Proton gives emergency access 2FA codes, you could always save those locally to ensure you can always access Proton Drive and get the rest of your codes. Or consider getting a FIDO2 security key (yubikey, titan sec key etc) for your Proton access.
Wadder Download Aegis on each user profile and download the backup file.
Just a heads-up: instead of the hassle of manually installing Aegis for each user profile and configuring it with a backup, you could use Ente Auth in each profile. This way, your codes will sync across all profiles with end-to-end encryption, making it easier for you to access them.
That said, remember to evaluate whether Ente Auth fits your threat model.
