In the Feb updated the other privacy os saying, they are now setting “Play Store” as installer when installing from Aurora Store to make some apps work. I dont use that os or dont have any plans to check it.
Dont think Graphene os will implement something like that and i personally dont want it to.
Graphene os's google play setup with a throw away account is much better and safer than Aurora store.
If anyone want they can use a google play setup with a throw away account in a different profile to update the apps, as it will set the installation source as playstore for apps in other profiles the apps will work.
I use only the owner account with a throw away account logged in, everything works as a normal, dont have to deal with these kind of issues.
To my understanding no one really knows what data is being shared using IPC, The non-foss apps installed in a secondary profile with google play services may share data to google and most probably foss apps wont share anything with google play services, so i feel its okay to use everything in a single profile. i wont worry about IPC until aosp comes with more ways to find details on that.
if anyone have more details or feels what i said is wrong, please correct me. so that i can improve my setup too.