Most people with passcodes set auto lock after a few minutes. An attacker can pair a device left briefly unattended by just connecting it to their Mac in just a few seconds.

Then, even if the device is later locked, they can bulk copy unencrypted files using tools like iExplorer, and browse at their leisure.

It's funny how some business class apps store usernames and passwords in clear text in their app sandboxes.