What if you remove the sim? Probably they can still hack with the account (apple id, google account) somehow given enough resources.