Better: restart the phone. This puts it into the safest state it has, as it has not yet been initially unlocked and will require a non-bio auth. Stronger security, may/should hold if they attempt to attack/hack/compromise it, if it comes to that. Takes like 3 seconds. Do it, not the equal-time-worse-security version of just disabling bio.

Additionally, running GrapheneOS you can set up a duress pin to wipe the phone profiles if things were to escalate.

Being smart, set up the main profile a bit to look real, but have no actual information. That way it’s not obvious tha its been wiped.

Being cheeky, set the duress pin to be something simple like your birthday. So if you are detained/arrested and they try to get into your phone they are the ones to wipe it for you.