It's not true cause Apple encrypt the keychain entries with Triple-DES (which isn't modern crypto but it's better than nothing.) If you get the file you can't

It's not true cause Apple encrypt the keychain entries with Triple-DES (which isn't modern crypto but it's better than nothing.) If you get the file you can't read it unless you have the password. The "attackers" do load the code in the phone and then they got the entries using the system API which is very (very) different from having only the file and/or only a not jailbroken phone. I repeat, !news.