At the moment I'm using separate Android User Profiles not just for different identities (personal/work), but also for better app isolation.

It's really nice to be able to shutdown a profile and know that apps from that profile are not running in the background.
"apps within the same profile can communicate with each other with mutual consent" in some cases I don't want apps to be able to communicate with each other even with mutual consent (which I assume is through Intents)
If I don't start the profile then 'Run at startup' permission does nothing - great.

Having a lot of User Profiles can be a bit of a pain though and so I looked into using web versions of applications/sites to replace the installed applications (using PWA where possible). The problem I saw with this is that the state of the PWA and of Vanadium are shared. For example I have a LinkedIn PWA on my home screen which is logged in and if I go to the Vanadium app and navigate to LinkedIn I am still logged in. I was hoping for a way to disconnect these two.

I've been doing some searching and first came across Browser Profiles which don't appear to be supported on Mobile.
Then that lead me to Firefox Multi-Account Containers
Which according to this page are now dead
and replaced with Total Cookie Protection - also not supported on Mobile

I think my ideal would be for Vanadium default everything to a private tab but then I could save a tab/session into a container of some kind and then have these containers completely isolated from one another.

So now to my actual question. Does Vanadium have anything similar to this or is there a better way on GrapheneOS for me to achieve some of these things. Can I further isolate some apps such as blocking additional permissions (e.g. Run at startup and others), prevent background services for an application when the foreground app is not running, and block 'communicate with mutual consent' .
Additional context is appreciated and feel free to correct anything I have here that is incorrect.