Its alright to install gsf in the main profile, work profile doesn't provide proper isolation.
you can disable the internet for all play services apps, but notifications no longer work.
in my opinion either you can go with a multiple user account setup or if you are not bothered about the IPC thing you can use everything in the main user profile that makes everything much simpler to use.