Why the hell doesn't the "duress PIN" just open up a sanitary profile? Bonus points for letting you set it up with plausible data before designating it as the duress profile that, when opened, wipes your real profile in the background.
> "the screen went blank, flashed several times, and the phone appeared to restart,"
How about flash some red lights and play an airhorn sound effect, too.
Just a guess… but they would just go back and ask him for the real pin if they saw the profile was empty.
My understanding is phone’s security model aren’t designed for multiple user accounts