Why install all apps in owner profile

GOSD-profile768

The guides I have read says to install all apps in the owner profile, and then install them to desired user profile through the user settings "install all apps".

Why should we do this, rather than only installing them on the profile where they are needed only ?

Especially Google Play, why should we install that on the owner profile, instead of only in a "Google" profile ?

I just installed GrapheneOS yesterday and I am trying to learn best practices and to setup my phone. I use Proton mail and it looks like I will need play to get notifications. I also prefer the play store as source of apps. While writing it just dawn's to me, that I will indeed need Play store in the Owners profile, to be able to share apps to the non-play profile(s)... So perhaps I just answered my own question ⁉️

other8026

GOSD-profile768 There's no official advice to handle app installs this way, but there do seem to be a lot of people who do. It's a workflow that works for some people, but if it doesn't work for you then do what works best for you.

n3t_admin

GOSD-profile768 The guides I have read says to install all apps in the owner profile, and then install them to desired user profile through the user settings "install all apps".

This has started around the time a well known (GrapheneOS-centric) YouTuber, SideOfBurritos, posted this video. It really only addresses some threat models. You might be fine with entirely different setups; it's just one of the ways you can use GrapheneOS.

Graphene1

If you could push Play Store obtained apps from a user profile to the owner I could see the benefit as you could end session to stop Play Services running in the background.

I don't see the benefit of having the owner profile running at all times anyway to then use a user profile.

Closed source apps others are likely trying to stop communicating with each other will all communicate in the "Google profile" anyway. Adding open source apps to the same profile are most likely not communicating with these apps anyway even if in the same profile.

Seems like friction unnecessarily for my use case.

KitsuneNoBaka

In owner profile I don't have google play store. I installed Apps from gos appstore / f-droid / obtainium there.
I have google play store in work profile and private space.

GOSD-profile768

KitsuneNoBaka so you still consistently get notifications from the Google user when working in an other user profile?

Eirikr70

I have everything in owner's profile, including Booble Play. Just a convenience choice.

KitsuneNoBaka

GOSD-profile768 owner+work+private is one desktop, you don't need to relogin, it's one notification screen.

gvprtskvni

I'm not sure how big of a security benefit it is in reality, but one reason could be to be able to have a strong passphrase for the owner profile, for extra protection in BFU, without having to enter it every time you check your phone.