Leaker reveals which Pixels are vulnerable to Cellebrite phone hacking

They couldn't answer the question most on my mind: "We’ve reached out to Google to inquire about why a custom ROM created by volunteers is more resistant to industrial phone hacking than the official Pixel OS. We’ll update this article if Google has anything to say."

Is grapheheOS actually harder to hack or does cellebrite just not put a lot of effort into supporting it because the very low odds of LEs running into one in the wild?

It physically disables USB ports when locked which significantly reduces the attack surface + can be configured to automatically reboot.

Two fixes that would be trivial to backport to mainline Android.

You can configure USB port for charging only in the developer options.

On Lineage this is the default behaviour: charging only until I tap on a notification to change it.