> It means they can extract data from the device once the user provides the lock method, which should always be expected. They unlock, enable developer options and use ADB.
No wonder you can extract data if the user provided you physical access to an unlocked device. What's the news?