With GrapheneOS you can physically switch off the USB while locked.