> Their entire claim of a horror story relies on having physical access and the passcode, which would be game over on basically any device anyway The issue her

> Their entire claim of a horror story relies on having physical access and the passcode, which would be game over on basically any device anyway The issue here is actually deeper. With the physical access to your device, they get access and ownership of your other devices, too. Say, you lose your iPhone on a trip and an attacker recovers your passcode for that phone (say you're not a HN'er, but an average joe who uses a 0000 passcode for convenience). Now the attacker can overtake your apple ID, go into the Find My iDevice app and _lock_ your iPad and your MacBook that are still in your possession. And now you've got two more bricks on your hand, which presumably display a Bitcoin address with a ransom.