A untrusted profile. Shady apps cracked apps etc. This profile also is not allowed to run in the background.
Then my finance profile. Has my banking apps and such.
A testing profile. Used to test backups of grapheneos and such.
A work profile. Dont need that to run in the background either. But is useful to stay in touch over the weekends.
And a private profile.
This way I can still use all my apps. While not requiring google play in all my profiles. Also being able to disable certain things for profiles is super useful. Running in the background, allowed to make/receive calls to name a few
A few things you have to learn in general are Virtualization docker and some network management. You can do this on very old stuff. And when you know the basics you can make a better guess to what hardware you need for the things you want.
I love and hate unifi at the same time. Their single web management for all devices is super convenient but some advanced things are a nono. It is expensive for what it is.
Understandable you dont name it. I never hat a company be like this how ever.