If that were the case it'd be fairly easy to add duress detection that just defaults the phone to password-only authentication.

Well, unless the cops use neural jammers or something. How cyberpunk.