Cheers, matchbox. 🥂
Here's a list of the contexts I've tested duress password with so far: https://monogr.ph/665ae7b0571fecfdc8c3bdb0
I will likely do more testing when QPR3-based GrapheneOS is released. I'll try to come up with more realistic scenarios if time allows. My intention so far was to find character/symbol combinations that would cause issues, as well as testing different screens and profiles. No issues so far. Any ideas are welcome.
I'm pretty confident at this point that the duress feature is robust. But it's still fun to keep poking it and try to find any potential issue, however small. (I'm not a researcher; just a rando having fun).