From what I hear, android uses the standard linux dm-crypt for encryption. Obviously you should have:
- A pin/password for your phone
- That pin/password should at least be 8 characters
The question is how much that already does to protecting the data on the phone. Let's just assume that the password you picked is "safe" and cannot be brute forced in any reasonable time.
1: Assuming the device does not use full disk encryption, law enforcement will still have access to everything, since they can still just read the data right from the sd card because it's not encrypted. Is that correct?
2: Even if you do have full disk encryption, it will only protect you as long as the device is turned off, since law enforcement can otherwise just read the data from ram. Is that correct?
3: Is there any benefit to disabling USB debugging?
4: Are there any security implications connected to rooting a device and/or using a custom recovery?
edit: law enforcement here is referring to normal police. Obviously you're gonna be screwed when NSA and the like are after you.
edit 2: When I'm talking about SDcard, I mean the internal card, I'm not talking about any external cards you might use.