I am wondering if its feasible to change the screen before the phone shuts off when entering the duress pin to make the phone look like it just crapped, with suggestions on how to fsck etc . perhaps even load a dummy user before doing so to goad them into believing it was coincidental
In countries where you are obligated to supply the pin, them knowing it was likely sabotaged could get someone harmed