In Android operating system, work profiles can be enabled using Android’s Admin panel ( I think that’s what they call it ), which requires a Google account, in a degoogled Android, we use Shelter which can enable the Work profile, apps in work profiles are isolated/separated from the main one, and they don’t have access to your main profile’s data, unless you allow it, you can also freeze apps when you lock your phone, ( apps like … Ahhm excuse me, I mean SPYWARE like Facebook, Tiktok keeps running in the background sending data and that might be a useful for that )

In CalyxOS you can set the VPN ( ProtonVPN ) to route all your traffic ( including the work profile ) thru the VPN tunnel, giving you extra layer of protection. ( I don’t know if it’s possible on LineageOS )

Personally I won’t take the risk of using Big tech apps from Meta, especially Meta,Tiktok and Google even in the work profile, I consider these apps to be spyware, and what spyware does is bypassing your guards and firewalls, working in mysterious ways ( proprietary Software ), and finally gathering as much info as possible from the infected device ( in the background off course )