If you wanted the best of both worlds:
I. Owner profile: bare bones
II. Secondary A: KYC/true name usage.
III. Secondary B: NoKYC/sensitive usage.
Use SecA for daily driver. SecB temporarily, then end session to encrypt at rest. When going through airport or travelling, end session on both. Note: owner will be able to see all apps installed. No golden bullet.
Will be alot less convenient. Notifications and certain management is a PITA.