Altought we have both of the managed contacts read/write restrictions active, apps (in this case WhatsApp Business) which are installed as "unmanaged" can still read the contacts deployed via EAS profile.
Does anyone know why this is happening and if there is a way to fix this?