It's to easy to delete a profile

chinook

Like likely most of us I use separate user profiles for the separate "activities".

Owner profile for most of my daily activities, banking profile because it's both real money and banking apps are maddeningly nosy (reporting all the installed apps, for one).

Each of the profiles contains data that would inconvenience me greatly if I lost it. Not having a reliable backup only increases the pain.

And yet deleting the secondary profile takes for the logged-in Owner only: double pull-down, tap, tap on Manage, tap on user, Delete, Delete.

Aaaand it's gone.

I wish it for example asked for the PIN/fingerprint. It's not the guest profile; they're permanent.

(and for the inevitable: "Don't Use Owner Profile", I would if I could, but:

migration is a MASSIVE PITA on GoS (backups yet again)
notifications forwarding from "sibling" profiles are very unreliable for me (even with battery unrestricted Google Services in both profiles)
can't do a number of things I use non stop (either with tasker or manually): toggle WiFi hostspot, use a call screening app
I use work profile (and Private space but they have different behaviour and designation)
And of course from time to time (once every other day?) my phone crashes when I switch between profiles

This is just not feasible for me. At the moment.)

What's the general sentiment?

23Sha-ger

chinook And yet deleting the secondary profile takes for the logged-in Owner only: double pull-down, tap, tap on Manage, tap on user, Delete, Delete.

You can also factory reset your phone using similar steps :)
If you find yourself giving your phone to occasional people there is a guest profile for that.
The owner profile can do lots of "click combinations" with potentially irreversible consequences.

nologo

chinook double pull-down, tap, tap on Manage, tap on user, Delete, Delete.

That's a total of six (6) consecutive actions. I can't imagine this happening unintentionally.

Still, the idea of asking for a pin/fingerprint before deleting a profile sounds reasonable.

ladyofcythera

chinook I think adding some kind of authentication before deletion would be good. Probably better to post this as a feature request on github though

wuseman

chinook (reporting all the installed apps, for one).

Can they actually do that with newer versions of Android?

chinook

ladyofcythera that was my intention indeed. But now I'll have to create another github account to avoid cross-linking, omg ;)

nologo and two more taps per every other profile you have. I'm not suggesting everyone is drunkenly handling over their unlocked phone to the mean peer, the idea is having the good, safe defaults. In all sensible Linux systems rm -rf / won't do anything because of the default --preserve-root - and you might argue it's unnecessary since dd can be used to destroy the filesystem equally as good...
This is NOT the point.

23Sha-ger Yes, you can also drop the phone into the lake, also rendering the data inaccessible. This is not my point. Guest profile is non sequitur, I'm not asking about safe way to lend the phone to someone (you could infer from my post I would know how to create a profile for them if I needed). Thank you.

chinook

wuseman I didn't try to install anything naughty on my GoS phone, but Natwest suddenly explicitly refused to start until I removed an app (not malware), and Nationwide explicitly admitted they are doing it.

From all the discussion about that and https://github.com/GrapheneOS/os-issue-tracker/issues/2197 I understand it's still very much an issue.

locked

It's deliberate the way it's set up.