It would work the other way around I think, steal someone's phone then look it up on the database. But you're right, it's not the vector I would be most worried

It would work the other way around I think, steal someone's phone then look it up on the database. But you're right, it's not the vector I would be most worried about either.