Bad opsec on their part. She should of set the recovery key ahead of time and use a passphrase. But better yet, don't bring your phone to bars. Just a small amount of cash and an ID.