What about using decoy profiles? Say before the border crossing you switch to another user. Does that expose keys or anything for other users?

You would need to hide the existence of the original profile while in the decoy profile for this to work, which GrapheneOS considers too complex to implement