ieatcatmeow Does [GrapheneOS] have features where if it fails X times for password it will wipe the phone?
No.
ieatcatmeow if the device unlocked, will some forensic device able to extract other profiles that we make? or is it limited only on the main one?
If the other profiles are at rest (not running in the background), their encryption keys are at rest as well. But if the device is unlocked there is much more attack surface, so it's hard to know what a forensic tool might be able to do.
ieatcatmeow will grapheneOS eventually implemented FiDO key as a login method?
I am unaware of a plan to support hardware keys as an unlock factor.