What do you think about adding an app like Private Lock from F-droid to the second user profile. It uses a motion sensor and, if the phone is taken away, switches to lock mode, disables the fingerprint, and requires entering a password. I know that apps like Wanted, etc., weakened Graphenos. It allowed data recovery in fastboot mode, although Google patched a RAM vulnerability. Graphenos uses very strong security, and the only thing I'm missing is an app that locks the phone in case of movement. I'm not a high-security user; I simply like security.
I install the Private Lock app, granting it sensor permissions and giving it administrator rights, blocking the internet and other permissions.
Is it worth it? Because the app doesn't have internet access, but it does have admin access.