After one year, here's how my Pixel 6a with GrapheneOS is setup

Last year I wrote 30 Days In, My Pixel 6a with GrapheneOS about how my phone was setup. The entire setup was cumbersome, and I gave up on the multiple profiles. Well, one year later this is how I'm setup, and it's working very well for me.

Private DNS Provider: NextDNS

Primary Profile:

• NO Play Services
• Aegis - MFA client
• AirGuard
• AndBible - Offline Bible
• Bitwarden – Password manager
• Breezy Weather
• c:geo - Geocaching client
• caffeinate - Adds a tile to keep the screen awake
• DAVx5 – Contacts and calendar syncing to Nextcloud
• Fedilab - Social networking client for Friendica and Mastodon
• Fitotrack
• FUTO Keyboard
• Heliboard
• Magic Earth – Proprietary (but supposed to be privacy-centric) navigation
• Material Files
• Molly – Signal client
• mpv
• NetBird – Mesh VPN client
• Nextcloud News – RSS reader for Nextcloud
• Nextcloud Notes – Notes client for Nextcloud
• Nextcloud Talk
• ntfy
• Obtanium - software installer
• Organic Maps – Open source navigation, used as a fallback
• Orion Viewer - PDF viewer
• Phonograph
• qBitController
• QUIK - SMS client
• Silence – Block calls that aren’t a contact
• Thunderbird
• URL Radio – Streaming radio client
• Wallabag

Primary Profile, Disabled:

• Brave – I only enable this if I need to login to an app on this profile. All web browsing is done through the private space.

Private Space - Private space is a new security feature of Android, similar to a work profile, that allows you to have applications and accounts segregated. No location permission. Turned off when not in use.

• 149 Live Calendar
• Bitwarden
• Brave
• ClearCheckbook
• FUTO Keyboard Instagram
• Google Camera, no internet permission
• Google Photos, no internet permission
• Google Play Services, sandboxed
• Google Play Store
• Google Voice
• Material Files
• Mullvad - Always on VPN
• Nextcloud
• Nextcloud Notes
• Obtanium
• Tapo - TP-Link cameras and smart device controls
• Tuta
• Untappd
• Vivint - Alarm system
• Weight Watchers

Private space, Disabled - I only enable these apps when they're needed, and disable them again when I'm done.

• Amazon Shopping
• Cryptomator
• Deco - Mesh wifi app
• Discord
• Facebook
• MyChart - Medical checkin, appointment setting, etc
• Nextdoor
• Outlook
• Pandora
• soundcore - Anker headphone app
• Teams
• Uber