Hoping to get help configuring a friend's P8a GOS phone for a specific scenario. Welcoming general critique / advice, and I also have a specific question relating to Cellebrite.

Background:

In my country border guards can demand that travelers give their phone password at customs. Refusing could result in the device being permanently confiscated and subjected to full file extraction with Cellebrite.

My friend also has sensitive info on the Owner profile. It is their daily driver.
The data is nothing too serious. Just some memes and articles shared via encrypted messaging with mild criticism of certain politicians. But in my country this is enough to trigger harassment and short detention if discovered by customs agents.

The goal:

Help my friend avoid getting the phone confiscated or harassed if targeted by casual snooping from a customs officer, without sacrificing the convenience of their current setup (Owner profile as their daily driver, 6 digit pin in Owner profile, no 2nd phone).

My friend is not very tech literate, and not a "hardcore" privacy person. It would be very difficult to convince them to adopt a 2nd phone, remove all sensitive info from their Owner profile, or change their Owner profile password to a long diceware passphrase for this upcoming trip.

They're coming to me for advice on how to present their current device to customs with minimum reasonable risk of getting the device confiscated, without relying on a 2nd phone or wiping the Owner profile.

Could anyone offer advice / critique on how to manage this risk, given the constraints above?

The best case scenario we came up with was -

Create a secondary Travel profile with a different password from Owner, filled with non-sensitive data and apps.

Before customs, reboot the phone, log in to Owner, then switch to Travel profile.

If targeted by a customs officer, comply with request for password to the Travel Profile.

Imagining a few different ways this could go:

In the best scenario, the customs agent doesn't notice the "end session" button on lockscreen or know what it means, logs in to Travel profile, swipes around for a moment, then returns the device and all is well.
In a worse case scenario, the customs agent takes the phone away to a back room and attempts full file extraction on the device's unlocked Traveler profile with Cellebrite.
In another bad scenario, the customs agent discovers that the phone is GOS and that they don't have access to the Owner profile, then confiscates it. My friend doesn't get harassed much but does have to buy an expensive new phone.

Specific question:

If scenario 2 happens (full file extraction on unlocked Travel profile), would the customs agents get access to the contents of the locked Owner profile as well?

Asking because I see here in the first post that post-2022 GOS is probably resistant to full file extraction from Cellebrite in AFU state:
https://discuss.grapheneos.org/d/14344-cellebrite-premium-july-2024-documentation

Does this imply that the contents of the Owner profile would likely remain inaccessible in this scenario?

It matters because we think the harassment would be less severe if the device is simply confiscated for having an inaccessible Owner profile. My friend would simply lose their phone and have to buy a new one.

On the other hand, if customs agents are able to access the Owner profile and find the sensitive data, we think they could be harassed more.

So we're wondering - in scenario 2, is data in the Owner profile at risk?

Would appreciate friendly general advice on how to handle this low to moderate severity risk scenario, and also clarification about the specific question above.

Thanks for reading, I have a lot of respect for the community here.