On a Google Mobile Services OS, Play services is built into the OS as a highly privileged component with immense access and handles work across profiles.
Sandboxed Google Play are regular sandboxed apps without any special access. Each installation in a separate profile is entirely independent.
@fazalmajid @morganist Set it to our added 4G-only mode for minimal attack surface. If your carrier supports Standalone 5G which is relatively rare, you could also use 5G-only. If you only want to disable 2G/3G then you could use the 4G/5G-only mode.
The lowest attack surface option with the highest security for the device itself is 4G-only. The next best option in that regard is 5G-only. 5G-only has the least insecure cellular network encryption but the network shouldn't be trusted anyway.
@morganist @fazalmajid Android has a standard feature for disabling 2G on carriers permitting it which is made available for all carriers on GrapheneOS.
GrapheneOS adds a much better feature predating the 2G toggle for using 4G-only, 4G/5G-only or 5G-only. The lowest attack surface option is 4G-only where you don't have the attack surface of legacy 2G or 3G along with not having the more complex 5G. 4G/5G-only just gets rid of 2G/3G and 5G-only is only available on carriers with Standalone 5G.
@GrapheneOS On this regard, knowing the answer might change in the future, can we have a somewhat official answer whether you suggest or not the use of 5g from a security perspective?
Thank you for all your great work, big fan!
@Baffling7384 No, that's the opposite of what we said.
This is about how it works on a Google Mobile Services OS instead of the stock Pixel OS::
> Setting up a work profile, Private Space and secondary user on the stock Pixel OS results in all 3 secondary profiles using the global Play services instance running in the Owner user for a shared FCM push connection, etc.
We're explaining sandboxed Google Play are regular sandboxed apps which means it can't operate across profiles like that.