Easy solution, use Linux. No extra permissions, no spying, and everything worked for me so far. Android has a neat feature for a separate work account. It used to be called "work acxount", but it's not there anymore and you have to use "secure folder", or whatever it is called now.

[–] [email protected] 1 points 10 months ago

When you sign into your works Google account or intune usually it will set a work profile up. If you want to set one up without this, or just want your own personal space for secondary apps you can install an app called "Island" from the play store.

I wouldn't recommend shelter as it bricks the functionality of the work profile on newer versions of Android.