The exploits in question generally require having the device in your possession and unlocking it.

I think the distinction is pretty clear.