For all hard drives you are looking to bring, look into plausible deniability using a hidden volume. Veracrypt supports this.

Don’t carry huge amounts of cash. Our police will steal it from you saying they think it was ill-gotten and you have to go to court to get it back. It’s called civil forfeit.

Turn off biometrics. You can be compelled to submit a fingerprint or pose for a camera. You can’t be compelled to reveal something you know (self-incrimination). Though that hasn’t stopped at least one judge from keeping someone indefinitely detained.

For the most part, our country isn’t a nightmare. But it can become one very easily under certain conditions. This is the rare outcome you hope to avoid that realistically won’t occur for most visitors.

I think you’re overthinking it. I used to go into the US often for business and I have never had any of my electronic devices searched. The best advice is to leave your phone at home and buy a cheaper pre-paid travel phone. Not because of privacy but what if it’s lost, stolen, or confiscated? It’s no big deal losing a burner phone.

Honestly, if you have any older or formatted devices I’d just bring those.

Or just removing my biometrics?

Ultimately you shouldn’t cross the US border carrying devices or encrypted data which you aren’t prepared to unlock for DHS/CBP, unless you’re willing to lose the hardware and/or be denied entry if/when you refuse to comply.

If they decide to, you’ll be handed this: “You are receiving this document because CBP intends to conduct a border search of your electronic device(s). This may include copying and retaining data contained in the device(s). […] Failure to assist CBP in accessing the electronic device and its contents for examination may result in the detention of the device in order to complete the inspection.”

Device searches were happening a few hundred times each month circa 2009 (the most recent data i could find in a quick search) but, given other CBP trends, presumably they’ve become more frequent since then.

In 2016 they began asking some visa applicants for social media usernames, and then expanded it to most applicants in 2019, and the new administration has continued that policy. I haven’t found any numbers about how often they actually deny people entry for failing to disclose a social media account.

In 2017 they proposed adding the authority to also demand social media passwords but at least that doesn’t appear to have been implemented.