By admin console, I mean a blank profile with nothing but stock Graphene apps on it. No Gplay store, no F droid, nothing. Its main job is to control esim, profile creation, duress pass, wifi…etc.
Or just a normal daily Main, with secondary profiles OR private spaces?
What i currently have: main profile with main Google (unfortunately), all sensitive in separate profile.
I only use one profile and have a private space with play services, playstore and anything else that I don’t trust. I turn it on only if I need to do something specific on it (use my banking app) and then it gets disabled again. I tried the main/secondary profiles approach buth I like this one more.