Nice question all the apps I am using in shelter (or work profile) have clones on the main profile, and both get updated simultaneously.
So I don’t have an experience with what you are asking about, although I can suggest trying to clone the Apps store itself to shelter and see if you can manage updates for the “Sheltered apps” separately.
More likely, it was a rhetorical question, since updating sheltered apps, as well as the correct using of AFwall+ with the work profile are impossible without cloning apps in both profiles (as far as I know).
Something I discovered about Shelter just last night. It was my assumption that if I’m using a VPN under my normal profile it’s also applicable to the Shelter profile. WRONG! You have run the VPN in each separate profile.
I wonder whether Shelter is actually doing what I hope it would do. So, I have put all apps that have too many trackers or that I fear might be “spying” on me in the Shelter. Probably the most pernicious one would be Facebook Messenger, for example. Anyhow, at first I would freeze all apps in there when not using Shelter(ed) apps, but that became too cumbersome. But I think the apps in Shelter are still keeping an “eye” on me and my activity within the Shelter at all times to extent and abilities they have. So, am I really accomplishing anything by using Shelter? I get that they are isolated from the apps in my main profile.
There is no necessity to always use an official client apps and containers for them. Often you can get a fine unofficial open-source client, which may be quite enough.
I don’t know these apps. If they are available in f-droid I would trust them. If they do have trackers, search the web for the tracker. You will find a explanation for 99%
No, I got those two apps in Aurora. They are not in F-droid.
Just saying that making a list of the most common trackers with a brief explanation of what they are (adtech, social media, analytics etc), what they are likely to do and how dangerous they are could be useful.