Following this being in the news, GrapheneOS wrote this post summarizing the data extraction defense: https://discuss.grapheneos.org/d/40700-grapheneos-protection...

On the duress pin, they say (read the whole thing though):

> People should carefully consider how to use it in an actual duress situation where there can be physical or legal consequences for wiping the device.