@HistoPol @retrocomputing @Goodlucksil There's no recommendation to install apps in a secondary user. There's a common misconception by people who wrongly believe it works the same way as a desktop OS about this. Apps running in the main user do not receive any extra access and are not any less sandboxed. Apps do not need to be put into dedicated profiles to be sandboxed. Using multiple profiles is useful but people should generally start with the 2 available nested profiles for convenience.