GrapheneOS seems to do better than anything else at preventing AFU exploitation based on the leaks.

iOS will be quite good BFU but on iOS the auto reboot (brings phone to BFU after 72 hours without unlocking) is, well, 72 hours. On GrapheneOS it's 18 by default and can be as low as 10 minutes.

Good luck on that, Cellebrite :)