I always tell people to power down their phone if they have to hand it over. When the phone is in a cold state biometrics don't work and everything remains encrypted. Also, don't use a 4 digit pin. It makes brute force too easy...