And they would have taken his phone, pulled it apart and cloned the memory to get the data. And in a month or three, returned his phone to him in some condition which may or may not include "working".

Sounds like a better outcome to me.

Plus, unless GrapheneOS gets encryption wrong (which I doubt), cloning the memory to get the data isn't really a thing.