They do though. Here’s a couple off of the top of my head:

• Granular permissions
• enhanced sandboxing
• hardware memory tagging and other memory corruption related explotation attempts
• lockscreen pin scrambling
• and I’m pretty sure graphene was the first to have the auto reboot feature to trigger BFU

What do you mean here? If a digital forensics team, police etc gets their hands on your phone while it’s unlocked there really is nothing that can be done, unless you have some sort of killswitch attached to the USB port lol