I'm really interested in your opinion @GrapheneOS - What do you think of duress PIN that behaves exactly the same but only wipes the private space + disables the private space setting? In my mind it would provide plausible deniability compared to an obvious full wipe. Or is that thought too naive and not realistic in the real world?