I think one could achieve some of that by using Private Space where Play is allowed permissions while stripping its permissions in the main profile. That’s if you trust Android’s permission model.
hmmm, I’m not familiar with Private Space - but if it comes from Android, then don’t trust it. The whole problem is that Google makes huge amounts of exceptions for Play Services, and then uses them to spy.
As in, they allow to run play things in the sandbox?
Graphene lets you run Google Play, but stops it from having outsized permissions, so it can’t spy quite as well.
I think one could achieve some of that by using Private Space where Play is allowed permissions while stripping its permissions in the main profile. That’s if you trust Android’s permission model.
hmmm, I’m not familiar with Private Space - but if it comes from Android, then don’t trust it. The whole problem is that Google makes huge amounts of exceptions for Play Services, and then uses them to spy.