GrapheneOS also will restart after 18 hours without being unlocked by default, you can adjust this down to as little as 10 minutes or as long as 72 hours. A reboot forces a phone into the most secure Before First Unlock status. Biometrics do not work there.