If you removed network permission on your main profile during installation, and then move the app to another profile. It will automatically get the network permission again, which is counter intuitive I guess.
Each profile has their own "Allow sensor permission by default" setting. You would have to disable it there too if you don't want apps to have it. Most apps work just fine without them.
Check if you want to receive phone calls and SMS on other profiles too, in User setting on main profile.
Regarding battery, I think it is negligible. What drains battery is apps that have unrestricted battery access and are doing something constantly during it. Or if for some reason Mobile Data drains your battery a lot.
The profile that has installed Google Sandbox, in the Google App settings, you can delete your Advertiser ID. I think this is useful to be more private?