Phone thieves will watch over peoples shoulders for them to input a passcode, which isn't that dissimilar to a lot of the replay/signal extension attacks.

A lot of damage can be done and things successfully owned without needing to hack or exploit the device (car/phone).