You’re using the phone and set it down, it hasn’t auto locked yet.

They have your lock screen password but not your iTunes password.

You thought they were a friend and let them borrow your unlocked phone.

Even for a security conscience person there are plenty of situations where someone could get your unlocked phone.

And most people aren’t security conscience. It’s to protect them, not you.