Comment by microtonal

Yep, on GrapheneOS you can set it to a very short period (IIRC it is 10 minutes, don't have my phone here). Shorter timeframes than 3 days is useful in a lot of circumstances. I think in most scenarios where some agency uses Cellebrite or alike, they'll just make sure to do it immediately after confiscating a phone and not after three days.

It's another example of iOS security theater. It can be sold as "Apple cares about privacy", but it does not add that much meaningful security. (Just like: iMessage is end-to-end encrypted, but it doesn't really matter because most people don't enable ADP and only have iCloud Backups that are encrypted at rest.)