Thinking about the best way (from a privacy and security perspective) to install apps in Private Space.
Requirements
I would like to use Private Space to host rarely used but still indispensable privacy-invasive apps (e.g. Google Maps, social media apps). For this setup, I prefer Private Space instead of a user profile to be able to use cross profile shared clipboard.
Note: In Owner Profile which is used as the main profile, Google Play Services are already installed and most apps (almost all FOSS) are installed via Sandboxed Google Play Store as recommended for typical non-technical users.
I am considering one of the following two setups:
Setup 1
For Owner Profile and Private Space two different Google burner accounts are used and the respective apps are installed via these, as suggested by Google.
Setup 2
Since release 2025051900 it's also possible to push apps to Private Space as it has been possible before with User Profiles thanks to the “Install available Apps” feature.
So if i'm not mistaken i could basically use just one Google burner account in Owner Profile to download all apps and push them to Private Space via Settings> Security & privacy>Private Space> Install available apps
and disable them afterwards in Owner Profile via App name> App info> disable
.
I currently use Setup 1 as the “Install available apps” feature for Private Space did not yet exist at the time of installation.
Is there any gain (or loss) in privacy with Setup 2? Or is there a better setup that I haven't thought of?