If my phone is stolen, the last thing I want is it to be returned. Just imagine where the phone might have been used on the internet, and how many agencies now know about it...If it was returned it would be mechanically shredded as it would be of no use to me. (the usefulness of buying a cheap second hand phone for peanuts, not the latest cutting edge glass brick that costs several hundred pounds, which I could ill afford to loose).
my password is 14 digits long, good luck trying to crack that.
I don't use fingerprint access.
I have automatic boot set at 30 minutes.
I have stupidly simple duress pin/password.
if my phone is stolen then whoever has it has 30 minutes or less to beat the pin or the phone is back to BFU and a little bit harder to break into. If in the mean time they accidentally use the duress pin/password, then they can have a P6a with factory reset GrapheneOS installed to use for themselves, and my data is safe, however the IMEI will be recorded on a lost/stolen data base, so some one some where will get into hot water!
No, I'm not a spy, no I have not let my inner James Bond run away with my imagination. I have other peoples data (contacts) on my phone. Their data is to be protected also.