The easiest attack vector is just mugging you on the street after you've unlocked your phone. The police are already doing this.

And unless you regularly leave you phone lying around, you'll realize this is pretty much a requirement for breaking into your phone anyway.