Hardening modern iPhone against forensic tools

Not necessarily. It’s pretty much always going to be less secure but not inherently insecure.

Not always going to be possible especially if you’re in distress. GrapheneOS has an auto reboot feature for this reason; it just needs to hold out in AFU long enough for auto reboot to kick in.