@orclev Standard operating procedure is increasingly to extract data with standard forensics software. If it doesn't go smoothly then they'll likely detain people and get experts to deal with it.

The room temperature IQ cop is going to plug the phone into a system that will do that forensic detection. Using commercial or special software.

Room temperature IQ cop knows how to plug the cord into the phone and the cord into the laptop.

@modem_down @beep @Semi_Hemi_Demigod The software walks the person using it through enabling Android Debug Bridge and extracting data with it. It's either not going to work or will be able to see many signs of what happened. GrapheneOS is well known to the forensic data companies and they make a point of trying to support it. They haven't had much success with locked GrapheneOS devices but they can certainly handle detecting it and detecting if a feature like this was used via ADB.