A few days into GrapheneOS

It is important to remember that all apps on Android are sandboxed, regardless of which profile they’re installed in. For most use-cases, using secondary user profiles to further isolate apps is unnecessary. However, isolating apps to different profiles does have a few advantages, some of which are listed below: Apps cannot communicate with apps in other profiles via inter-process communication (IPC). Apps cannot discover which apps are installed in other user profiles. In cases where apps don’t support multiple logins, profiles can be used to get around this kind of limitation. All profiles have their own unique encryption keys, even if they share the same PIN or password. It’s possible to end secondary user profiles’ sessions, putting their data at rest (a reboot is necessary to put the owner profile’s data to rest). This also stops apps from running in the background. The owner profile can control secondary user profiles’ access to: continue running while other profiles are in the…