W1zardK1ng
The only advantage of using separate profiles are for stopping IPC.
I disagree. I have two reasons that I use multiple profiles. The first is due to known facts, the second is due to speculation:
1) I work for an organization that is subject to FOIA requests and subpoenas. I have chosen to use my personal phone for work rather than carry a second phone. So my phone is subject to FOIA/subpoenas. By separating out all work functions into a secondary profile, I am able to comply with the FOIA/subpoena and not have to worry about some random person getting access to my taxes or any other info that would give them the ability to steal my identity.
2) This one is the speculation. I freely admit to not yet understanding the architecture of GOS well enough to evaluate it. But, it's typically a "best practice" to not use a system with elevated privileges unless necessary in case of a successful zero-day attack. So I have a "me" profile for daily driving. I use the owner profile to install apps, push them to the 'me' (or work) profile then disable them in the owner profile. If I have to install a Google Play app (Microsoft Teams for my work profile), I enable Play and Play services in owner, install the app, push it to Work, then disable Play, Play services and the app in Owner. Then I go into the appropriate profile and use the app.
My thought is that, if I inadvertently use an app with a zero-day exploit that incorporates a sandbox-escape, my Owner profile should still be safe. I hope.
Yes, it's cumbersome, and yes, I've been dealing with the notification bugs and whatnot. I'm still determining if it's worth it to go this route. I'll still need the Work profile for legal reasons mentioned above, but I didn't really know about the private space before I set up the 'me' profile. I guess I need to see how much benefit is gained from sandbox-escape in private space vs. secondary profile.