Some observations about Android's work profile. It's kinda like multi-user, but you don't have to log out and log in to switch user. The second profile is a separate space from your main profile under the same account.
Today I'm trying an app called MissLee (李跳跳), it uses the a11y (accessibility) to simulate click/touch to close add automatically. I put all Chinese apps in my work profile, but the a11y settings can be only enabled for apps in the main profile. However, the app in the main profile has no awareness of apps in work profile. Aka the MissLee cannot close ads for those apps in work profile.
So I installed the MissLee in the main profile anyway and enabled the a11y settings for it. To my surprise, the MissLee in the work profile is also enabled (reported by the app) and is working fine. So I'm guessing the Andorid is managing settings based on the package id. If you give some app some system-level permission (like simulating touch), then it will be given to all installed apps using the same package. To make sure there are no holes in terms of security, you cannot install apps that use the same package id but different signature. This ensures all apps using the same package id do come from the same developer.
Brilliant design, if they can document this behaviour.