Just make a new profile name it like the following: Junk and install everything what is sketchy there. Any apps in other profiles are protected. I made a separate Play profile where I have Google Play installed. Anyway all the apps are isolated, so unlike with other Android OS here each app is isolated and can't connect/harm/read/write other apps data.