Play is already sandboxed and as was explained to me on their forum, separate profiles do not further isolate apps from each other so I operate with a single profile policy to keep the complexity down. Keep in mind that privacy is not my primary concern but rather the usability of a smartphone so Ymmv.