Even with GrapheneOS on my Pixel, you won't catch me plugging my phone in to random coffee shop USB ports to charge 🙂↔️
USB vulnerabilities are widely exploited. It's used against journalists, activists, dissidents and others at border crossings, protests and elsewhere. Android 16+ has opt-in protection but it's far weaker than our default and blocks installing apps from outside the Play Store.