BadUSB emulates a keyboard. So one would want to make sure that the phone was locked before hooking it up to a random charging port. Android exploit demo here:

* https://github.com/caioau/badUSB-Targeting-Android