lawman How can we make feature requests that users could vote for?
Historically the GrapheneOS project operates based on the judgement of the developers, not based on voting.
Please note that I do not speak for the GrapheneOS project.
lawman One that would be really comforting is a duress profile PIN. Rather than wiping the device which the current duress PIN does (and keep this option pls), it logs person into a dummy profile, where no other profiles can be seen. (optionally allow perm wiping all other profiles).
A big advantage of the current system is that it quickly and comprehensively wipes the device. At present a dummy profile would not reliably hide the existence of other profiles from even an informed end user, and would definitely not work against a motivated attacker.
lawman This feature would be really useful to have as a safety measure.
For which circumstances?