So this is super sucky and likely to spread. Alternate source. Key points, at roadside stops etc, people are required to give access to their phones using Cellebrite Israeli phone crackers, likely to download a complete image. No limits placed on data retention, no noted protection against Cellebrite having unfettered access.

Has it gotten to the point where we should be striving to keep only a minimum viable configuration on phones and have some sort of searchable backup on a home server, or even an out of country VPS? Anyone got any suggestions on how to achieve this?

Having GrapheneOS doesn't help much when it's a ten year felony to refuse access. AFAIK it's still a warrant to get access to your home computer, for now.

This may get shot down in the courts, but that won't help much if it happens to you in the meantime, this stuff is forever. The right to digital privacy has the price of eternal vigilence, but they just keep raising the bar on how onerous that vigilence is.