Ghostinfinit this is a really good point
The smart way to use Graphene is to use a hard password to unlock the device first time and a different profile with a password with an easy profile for most day to day things. This was, if your phone locks after you put it down for 10 mins, you enter the easy password. You also do automatic reboot after 4 hours or 1 hour or 8 hours, so that way if your phone isn't used in a while it goes back to the hard password and it mitigates against someone being able to place guesses regarding the easy password, since the phone will reset eventually.
If I had to do it over again, I would keep the main profile just blank and not have anything in it. I would install everything to other profiles from neo in each profile.