GrapheneOS says its data-wiping “duress” password is perfectly legal, after user faces federal charges