It's too bad GrapheneOS doesn't support hidden volumes.

It can't because it runs on phones which only have SSDs which leave forensic traces. They would like to improve deniability but it must be robust, whatever they implement.