Work profile is basically a second set of apps with a little briefcase badge that coexist next to your other apps. You/work chooses which apps are installed. They can't access the data in your actual profile and vice versa. You don't log out and in, it's just 2 containers spaces.
Private space is basically another such container, meant to be a 2nd personal one, but the apps aren't seen next to the others ... Theyre inert and hidden until you unlock the private space (pin/print/etc)
I think Android 15 is needed or thereabouts.
IDK about this 3rd party one being mentioned by adding it to my todo list
So remember that it's one core (physical) acting as if it was 2 (virtual). Each of these vCores could be assigned to separate workloads on a server. But because it's ultimately one core, threadA could possibly access data in threadB. If A was a different entity than B, then entity A could access entity B's data.
It's more that CPU architecture is insecure in general.
But so is literally everything when you go down the deep dark rabbit hole of all the tech we use. Meltdown, Spectre, rowhammer, VMScape. The one where they can figure out your password from the sound of your keyboard while you're on a zoom call.