Even a single CBP employee scrolling through your texts feels like too much to me. But when they take your phone, they're making copies of all the content in the phone and as much as possible from any apps/websites you're logged into. And that permanently lives in a database which doesn't afford you even the very thin veil of protection against misuse that a US citizen might be granted.
It does all seem to be too much.