Yes that is all possible. All accessible via different PIN codes. Read that some people have their ‘Kids’ profile setup with hardened permissions (not for their 3 year old but rather their own finance fun money stuff).
There are many different write-ups on Stacker News, but this is a great intro #200175. As are these entries:

GrapheneOS

Final tip

Just make sure you grab Obtanium via https://github.com/ImranR98/Obtainium to download apps and avoid Google Play if you can avoid it (even with some privacy improvements there).