Istioctl installation with profile : citadel

Hi,

Using istio( v1.5.0) for the first time and noticed that the installations from helm changed to istioctl with profiles. The CRD numbers which were 53 are around 25 in the current installation process. So do the citadel or any security related CRDs need to be installed separately outside of the istioctl install process ?
Any direction is appreciated.

take a look at istio architecture citadel, gallay and pilot are now merged in istiod, mixer is removed.