I have a strict policy to not let my kids play with phones. (Books and toys are plenty fine.) And I don't let my phone hang around and used as a passive toy (in locked mode) either. Yet more than once my phone has been "found" and the max password attempt has been triggered. It happens really easily despite my efforts.

Now in the grand scheme of things, this is just an annoyance as I can restore the phone from up-to-date backups. If someone is concerned enough, they could also toggle the wipe feature on/off based on their travels and live with the risk of an accidental wipe knowing that things can be restored.

On the iPhone, 2fa codes must be set up again manually using recovery codes - can't be restored from backup. Huge pain in the butt IMHO

This can happen from carrying it in your pocket. Moisture (sweat) from your leg can cause random inputs on the touch screen.

Solution is to put the phone in your pocket facing outwards. Also prevents turning on the camera or flashlight with your leg.

Sounds like it was a personal device that had access to work email. That's a whole other issue that I wish had a better option than "adding your work accounts lets anyone using the phone see them."