You are right, that private space is different.

About google sandbox, I tried to refer to this:

"Apps within the same profile can communicate with mutual consent and it's no different for sandboxed Google Play."

https://grapheneos.org/usage#sandboxed-google-play