I think you misunderstood what I said (might have been since I wasn't too clear on this in my comment). I wasn't criticizing the profile feature itself. Profiles are fantastic for your use case. I was criticizing using profiles for THIS use case (i.e. substituting for containers). They simply don't substitute for the container feature; they solve different problems. One is for separation of concerns and one is for privacy/security. The two sometimes affect each other but they're not the same concerns.