I feel like the probability of the 'average' user having his/her phone stolen is much greater than that of being compelled to unlock his/her phone by police or

I feel like the probability of the 'average' user having his/her phone stolen is much greater than that of being compelled to unlock his/her phone by police or a significant other. While I would prefer two-factor authentication with TouchID, I still feel like this implementation protects the user from the lowest common denominator (i.e. petty theft).