I’ve used Graphene OS for years, but only recently started taking advantage of the profiles feature.
Currently the Owner profile that you log into on first boot is my main profile, and I have a secondary decoy profile that I can switch to. Is this the best way to do this, or should it be the other way around so that on first boot you go into the decoy, which also allows you to end the session of the main profile?
Maximum paranoia.
The main profile should be very vanilla.
Use a secondary profile as your daily driver, play with the cross profile notifications
Use different logins for the main profile and secondary profiles.