I planned on different profiles using Graphene OS, however installing Google Play apps cross profiles doesn't seem to work, so also looking at keeping an old pixel for certain tasks

I'd really like an OS with different secure profiles where login for some profiles is only via a yubikey type device

Use a travel profile, sorry Mr invasive at airport, I cannot unlock THAT profile as don't have the auth device with me