By admin console, I mean a blank profile with nothing but stock Graphene apps on it. No Gplay store, no F droid, nothing. Its main job is to control esim, profile creation, duress pass, wifi…etc.
Or just a normal daily Main, with secondary profiles OR private spaces?
What i currently have: main profile with main Google (unfortunately), all sensitive in separate profile.
I run three profiles: main profile is where all my FOSS stuff is, every day things, no tracking stuff allowed. And of it does, I just revoke network permissions. No Google play services or play store installed on this profile at all
Secondary profile has banking apps, basically anything at all to do with money or requires Google play services to work. I even disable network access for most of the apps on my secondary profile until I need to use them. Google play services and play store are installed on this profile.
Third profile is dedicated navigation user that just has Google maps and other amenities like music for listening while driving. I have this one separated because I allow my secondary profile to run in the background and I don’t want Google maps running in the background so I created a third user. The third profile doesn’t run in the background. It’s pretty easy, I just switch to it when I need solid navigation. This of course also has play services installed. I know this is overkill. It’s just for myself because location tracking is a particular peeve of mine
All my profiles have Molly installed and connected up so I never miss a text or call between profiles