Ever since phones became pretty immune to reselling-theft (steal phone, reset it, sell it) people have been snatching phones and trying to empty crypto, banks, etc before it locks. Some apps don't reauthenticate.
Interesting point. The article linked in a sibling comment (about 2025 thefts) suggests that they are being resold. Which makes sense if it's a $2000 product that's so stealable. But I do recall there being a lot of difficulty resetting a phone that isn't yours. Do you feel the is article wrong? Are there ways around it? Is "pretty immune to reselling-theft" a newer feature than 2025?
Bonus security on iPhone - if you long-press on any app, you can click "Require Face ID" and it will make thieves need your face again to open bank or sensitive apps. I did this for all my financial apps amd also email so they can't reset passwords. It isna minor inconvenience but would hopefully prevent an unlocked phone from being stolen and having bank accounts emptied.