I don't want Google play services running, sandboxed or not, on my primary user profile. In the event I need it, Uber, better mapping, bank app that actually works, etc. I will pull up other profile for the few apps that I use which rely on Google play services. It's mostly to help minimize my reliance on Google play services which I've been trying to get away from for a while now. It truly is inescapable, but I want to be able to choose when and where they have access to my data and do my best to minimize data that is shared across apps